Lead PAM Engineer – Senior

Location: National Capital Region (Washington, DC) – Hybrid/Onsite
Clearance: Must be able to pass background check (U.S. work authorization required)

Salary: $120,000-$150,000

---

Position Overview

We are seeking a Senior Lead PAM Engineer to design, implement, and manage enterprise Privileged Access Management (PAM) solutions across hybrid environments. This role is responsible for securing privileged identities, enforcing least-privilege access, and ensuring compliance with enterprise cybersecurity and identity governance requirements.

---

Key Responsibilities

• Lead planning, implementation, and support of PAM platforms across enterprise environments
• Onboard and manage:
  • Privileged accounts
  • Vaults and safes
  • Credential rotation policies
  • Connection components
• Configure and support:
  • Privileged session monitoring
  • Audit logging and reporting
  • Access reviews and governance processes
  • Break-glass procedures
• Integrate PAM platforms with:
  • Active Directory / Entra ID
  • SIEM and logging systems
  • Identity governance tools
  • Endpoint and cloud environments
• Design PAM architecture and develop:
  • High-level and low-level design documentation
  • Implementation plans
  • SOPs and operational runbooks
• Troubleshoot access, authentication, policy, and integration issues
• Collaborate with SOC, NOC, and compliance teams to ensure security alignment
• Support Zero Trust and least-privilege access strategies

---

Required Qualifications

• 8+ years of experience in:
  • Cybersecurity engineering
  • Identity & Access Management (IAM)
  • Privileged Access Management (PAM)
  • Enterprise security or infrastructure security
• 5+ years of hands-on experience with:
  • PAM / IAM platforms
  • Privileged credential lifecycle management
  • Access control implementation
• Experience supporting environments across:
  • On-premise
  • Cloud
  • Hybrid architectures

---

Technical Expertise

• PAM / IAM Platforms:
  • CyberArk
  • Microsoft Entra ID / Entra PIM
  • SailPoint
  • Okta
  • BeyondTrust
  • Delinea
• Identity & Access Technologies:
  • Active Directory / LDAP
  • SAML, OAuth
  • MFA, RBAC
  • PKI / PIV/CAC
• Core Capabilities:
  • Privileged account onboarding and vaulting
  • Credential rotation and lifecycle management
  • Session monitoring and auditing
  • Access governance and reviews

---

Frameworks & Methodologies

• Knowledge of:
  • NIST frameworks
  • Zero Trust architecture
  • ICAM / FICAM principles
  • Identity governance and compliance

---

Education

• Bachelor’s degree in Cybersecurity, IT, Computer Science, Engineering, or related field (or equivalent experience)

---

Certifications (Preferred/Required)

• CISSP, PMP, or equivalent cybersecurity certifications
• PAM/IAM platform certifications (CyberArk, Microsoft Identity, Okta, SailPoint, etc.)

---

Additional Qualifications

• Experience designing enterprise PAM architecture
• Strong documentation and communication skills
• Ability to train stakeholders and present to leadership
• Experience working in regulated or federal environments preferred

---

Ideal Candidate Profile

• Hands-on PAM engineer with architecture-level experience
• Strong background in identity security and access governance
• Experienced in enterprise-scale deployments and integrations
• Comfortable leading technical initiatives and mentoring teams
• Detail-oriented with strong troubleshooting and analytical skills