Position OverviewSamsung SDS America is seeking an experienced
Privileged Access Management (PAM) Engineer to design, implement, administer, secure, and continuously improve enterprise privileged-access capabilities.
This position has a strong emphasis on CyberArk, Windows and Linux infrastructure, authentication services, privileged-account security, and enterprise identity management. The engineer will be responsible for both the technical operation of the PAM environment and the development of security controls, automation, integrations, and governance processes that reduce the risk associated with privileged access.
The ideal candidate brings7+ years of hands-on IT infrastructure and cybersecurity experience, including significant experience supporting large-scale Microsoft Active Directory and Linux environments, privileged and service accounts, authentication infrastructure, and enterprise security controls. The successful candidate will be comfortable operating at both the engineering and operational levels-designing solutions, troubleshooting complex issues, automating repetitive processes, and partnering with infrastructure, security, application, and business teams.
ResponsibilitiesPriveleged Access Management/CyberArk- Design, implement, administer, and continuously improve the enterprise CyberArk PAM environment, including Digital Vault, CPM, PVWA, PSM, PSM for SSH, CCP, AAM, and EPV.
- Onboard, manage, and secure privileged, service, and application accounts across Active Directory, Linux/Unix, databases, network devices, cloud platforms, applications, and infrastructure appliances.
- Configure CyberArk safes, platforms, policies, access controls, password rotation, reconciliation, and privileged-session monitoring/recording.
- Troubleshoot CyberArk authentication, connectivity, account onboarding, password rotation, reconciliation, and session-management issues.
- Integrate CyberArk with Active Directory, LDAP, SIEM, MFA, ticketing, IAM, and other enterprise security platforms.
- Support CyberArk upgrades, migrations, high availability, disaster recovery, and platform lifecycle activities.
- Design and maintain IAM/PAM processes aligned with Zero Trust and least-privilege principles.
- Identify and remediate excessive, dormant, orphaned, shared, unmanaged, and otherwise high-risk privileged accounts.
- Manage privileged identities including Domain/Enterprise Admins, local administrators, service accounts, application accounts, database accounts, and network administrator accounts.
- Integrate PAM and identity services with Microsoft Entra ID/Azure AD, AWS IAM, LDAP, SAML, RADIUS, TACACS+, MFA, and SSO.
Automation & Security Operations- Develop automation using PowerShell, Python, CyberArk REST APIs, Microsoft Graph/API, and other scripting technologies.
- Automate privileged-account discovery and onboarding, password management, access reviews, service-account inventory, and compliance reporting.
- Integrate PAM events with SIEM and security-monitoring platforms and support investigation of privileged-access events.
- Support security audits, compliance requirements, incident response, vulnerability remediation, and privileged-credential compromise investigations.
Infrastructure & Support- Support secure Windows and Linux infrastructure and apply enterprise security-hardening standards.
- Troubleshoot identity, authentication, infrastructure, and connectivity issues across complex enterprise environments.
- Apply fundamental networking knowledge, including TCP/IP, DNS, DHCP, routing, and firewall concepts.
- Collaborate with cybersecurity, infrastructure, network, cloud, application, and business teams to resolve complex technical issues and continuously strengthen privileged-access security.
Requirements- 7+ years of professional experience in IT infrastructure, cybersecurity, identity management, systems engineering, or a related discipline.
- Extensive hands-on experience implementing, administering, and supporting CyberArk PAM in an enterprise environment.
- Strong experience with CyberArk components such as Digital Vault, CPM, PVWA, PSM, PSM for SSH, CCP, AAM, and EPV.
- Demonstrated experience onboarding and managing privileged accounts across Windows/Active Directory, Linux/Unix, databases, network devices, applications, and service accounts.
- Deep enterprise-level Microsoft Active Directory experience, including forests, domains, Domain Controllers, Sites, OUs, GPOs, and privileged-access security.
- Strong understanding of IAM, PAM, authentication, authorization, MFA, SSO, and least-privilege security concepts.
- Hands-on experience with Windows and Linux server administration and security hardening.
- Strong scripting and automation capabilities using PowerShell and/or Python.
- Experience working with REST APIs and automation frameworks; CyberArk API experience strongly preferred.
- Working knowledge of Microsoft Entra ID/Azure AD, AWS IAM, LDAP, SAML, RADIUS, and/or TACACS+.
- Experience integrating PAM or identity platforms with SIEM, MFA, ticketing, and security-monitoring solutions.
- Strong understanding of enterprise networking fundamentals, including TCP/IP, DNS, and DHCP.
- Experience supporting security audits, compliance programs, vulnerability remediation, and incident-response activities.
- Strong troubleshooting, analytical, documentation, and problem-solving skills.
- Ability to work effectively with infrastructure engineering, cybersecurity, application, cloud, and business teams.
- Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Engineering, or a related discipline is preferred.
Preferred Qualifications- CyberArk certification or demonstrated equivalent expertise.
- Experience with CyberArk architecture, upgrades, migrations, disaster recovery, and high-availability implementations.
- Experience with CyberArk REST APIs and automated account onboarding.
- Experience managing large-scale service-account and application-credential environments.
- Experience implementing Zero Trust security architectures.
- Familiarity with privileged-access workstation (PAW) concepts and Microsoft security-tiering methodologies.
- Experience integrating PAM with cloud and hybrid identity environments.
- Experience developing automated security controls, compliance reporting, and access-review processes.
- Experience working within large, global, or highly regulated enterprise environments.
BenefitsSamsung SDSA offers a comprehensive suite of programs to support our employees:
- Top-notch medical, dental, vision and prescription coverage
- Wellness program
- Parental leave
- 401K match and savings plan
- Flexible spending accounts
- Life insurance
- Paid Holidays
- Paid Time off
- Additional benefits
