PIM/PAM Engineer

Position Summary

We are seeking a highly skilled and motivated PIM/PAM Engineer to join our team. In this role, you will be responsible for the architecture, design, implementation, and administration of enterprise-level Privileged Identity Management (PIM) and Privileged Access Management (PAM) solutions.

Key Responsibilities

- Design, deploy, configure, and maintain robust PIM/PAM solutions across enterprise, cloud, and hybrid environments.

- Manage the lifecycle of privileged accounts, including automated vaulting, password rotation, privileged session management, and just-in-time (JIT) access.

- Integrate PIM/PAM tools with broader identity ecosystems (IdPs, IGA, SIEM, and ticketing systems like ServiceNow) using APIs and custom scripting.

- Define, implement, and enforce least-privilege access policies, role-based access control (RBAC), and attribute-based access control (ABAC).

- Conduct regular discovery audits to identify unmanaged privileged accounts, service accounts, and secrets, bringing them under centralized management.

- Provide tier-3 technical support for complex identity infrastructure issues, system upgrades, patches, and disaster recovery drills.

- Support continuous monitoring and audit readiness by generating compliance reports and ensuring adherence to federal and DoD security frameworks.

- Deep understanding of session recording, credential vaulting, secrets management, and delegation of authority.

- Strong foundational knowledge of Windows Active Directory, Linux/Unix administration, Group Policy Objects (GPOs), and basic networking protocols.

- Proficiency in scripting languages (e.g., PowerShell, Python, Bash) for automation and API integrations.

Qualifications & Skills

- Degree: Bachelor’s degree in computer science, Information Technology, Cybersecurity, or a related technical field is required.

- 6+ of progressive IT experience required with 2-3+ years of dedicated experience in Identity and Access Management (IAM), with a strong focus on PIM/PAM engineering highly-desired.

- Must have CompTIA Security+ CE (Current)/ IAT Level II certification or ability to obtain within 30 days.

- Must be a U.S. Citizen.

- Must currently possess, or have the clear ability to obtain and maintain, a DoD Secret Security Clearance.