Lead Privileged Access Management (PAM) Engineer

Area of Expertise: Privileged Access Management

Location: Hybrid (Boston, Tampa, Jersey City, McLean, Dallas)

Job Description:

A leading financial services institution is seeking a highly skilled and experienced lead Security Engineer to join their team. This role focuses on developing, implementing, and maintaining robust PAM solutions to safeguard critical systems and data. The successful candidate will act as a Subject Matter Expert (SME) and Technical Lead for PAM initiatives, ensuring compliance with regulatory requirements and supporting the organization’s security framework.

Responsibilities:

• Lead the design, implementation, and management of PAM tools, including CyberArk, Conjur, and Azure PIM.
• Act as the SME for PAM solutions, providing technical leadership and mentorship.
• Troubleshoot and resolve issues with PAM solutions and related applications, ensuring minimal downtime and optimal performance.
• Integrate PAM principles with Identity and Access Management (IAM) in cloud environments such as AWS, Azure, and GCP.
• Ensure secure access to cloud-based resources while maintaining adherence to best practices.
• Ensure PAM practices align with regulatory requirements and industry standards, including GDPR, FISMA, PCI, HIPAA, SOX, and FICA.
• Collaborate with compliance teams to support audits and implement necessary controls.
• Develop and maintain policies and procedures for privileged access, ensuring appropriate access levels for users and applications.
• Perform regular reviews and audits of privileged accounts and access rights.
• Partner with cross-functional teams to enhance security practices and integrate PAM with other security solutions.
• Provide training and documentation to end-users and technical teams on PAM tools and processes. Evaluate and recommend new tools and technologies to enhance PAM capabilities.
• Continuously improve existing PAM frameworks to address evolving threats and organizational needs.

Qualifications:

• Bachelor’s degree in Information Technology, Cybersecurity, or a related field (or equivalent experience).
• 5 years of experience in Privileged Access Management, including at least 3 years as a SME or Technical Lead.
• Expertise with PAM tools such as CyberArk, Conjur, and Azure PIM.
• Strong understanding of IAM and PAM principles in cloud environments, including AWS, Azure, and GCP.
• Demonstrated knowledge of regulatory standards and their application to PAM processes (e.g., GDPR, FISMA, PCI).
• Proven experience troubleshooting and resolving technical issues with PAM solutions.
• Strong problem-solving, analytical, and communication skills.

Preferred Qualifications:

• Relevant certifications, such as CyberArk Defender, AWS Certified Security, or Certified Information Systems Security Professional (CISSP).
• Experience in scripting and automation to enhance PAM workflows.

Work Environment:

This role requires a hybrid schedule, with 3 days per week on-site in one of the following locations: Boston, Tampa, Jersey City, McLean, or Dallas.