Lead Privilege Access Management Engineer
Core
Lead the design, integration, implementation, and operationalization of enterprise Privilege Access Management (PAM) solutions for human and non-human identities across cloud and hybrid environments.
Role type
Senior IC Lead Privilege Access Management Engineer (Cyber Security)
Builds
Secure, scalable PAM solutions, Endpoint Privilege Management controls, and automated identity governance pipelines.
Domain
Financial Services / Cyber Security / Identity & Access Management
Required skills
PAM engineering (CyberArk, HashiCorp Vault), Identity Federation (OIDC/OAuth2, SAML, SSO, FIDO2), PKI (mTLS, cert lifecycle), Infrastructure as Code (Terraform), CI/CD, Python/Shell/PowerShell, Kubernetes, Ansible/Puppet/Chef, Policy-as-code (Rego)
Preferred skills
Experience with agentic systems, threat modeling, least privilege governance, large-scale global IAM operations
Technologies
CyberArk (IDIRA, EPM, PTA, PVWA), Entra ID, Ping Identity, HashiCorp Vault, Kubernetes, Terraform, Ansible, Puppet, Chef, OIDC, OAuth2, SAML, FIDO2, mTLS, Rego
Responsibilities
Design and build secure PAM solutions for human and non-human identities; Integrate PAM platforms with authentication and federation standards; Operate large-scale PAM estates with HA/DR and performance tuning; Define and enforce identity lifecycle and secrets management policies; Assess technical debt and deliver remediation plans; Translate architecture into executable work and documentation.
Seniority
Senior, hands-on IC