From Home Privileged Access Management Engineer Jobs

Job Title: Privileged Access Management (PAM) Engineer

Contract Type / Duration: Contract | 6 Months

Location: Hybrid – New York, NY; Alpharetta, GA; or Montreal, Canada (3 Days Onsite)

Work Hours: 40 Hours/Week

Job Summary / Overview

We are seeking a Privileged Access Management (PAM) Engineer to design, implement, and support secure privileged access solutions while helping integrate AI-driven automation into enterprise security platforms. This role combines expertise in identity security, privileged access management, cloud technologies, and AI-enabled engineering to build secure, scalable, and compliant solutions for a large enterprise environment.

The ideal candidate has strong hands-on experience with enterprise PAM platforms, modern AI technologies, and secure software engineering practices.

1. Privileged Access Management (PAM)

• Hands-on experience with enterprise PAM platforms such as CyberArk, BeyondTrust, Delinea, or One Identity

• Strong understanding of privileged access, service accounts, non-human identities, least privilege, RBAC, Just-in-Time (JIT) access, and session management

• Experience implementing privileged access governance and security controls

2. AI Platform Engineering & Automation

• Experience building or supporting AI, LLM, automation, or platform engineering solutions

• Knowledge of prompt engineering, model evaluation, hallucination mitigation, drift monitoring, and grounding techniques

• Experience with agent frameworks, orchestration, and multi-agent workflows

3. Enterprise Security Engineering

• Experience integrating AI solutions with enterprise identity, security, monitoring, and compliance platforms

• Strong understanding of secure software development, cloud-native architectures, APIs, distributed systems, and modern MLOps/LLMOps practices

• Experience supporting production environments in regulated enterprises

• AI governance, model controls, guardrails, and audit frameworks

• Knowledge of NIST AI RMF, OWASP Top 10 for LLM Applications, MITRE ATLAS, or ISO AI governance frameworks

• Hybrid cloud architecture experience

• Experience securing machine identities and non-human identities

• Experience remediating privileged access risks and hardcoded credentials

• Audit, compliance, and regulatory support experience

• Financial services or other highly regulated industry experience

• Design, implement, and support enterprise Privileged Access Management solutions

• Build secure AI-enabled automation for identity and security operations

• Integrate AI solutions with enterprise identity, monitoring, and security platforms

• Develop secure access controls for privileged, service, and machine identities

• Support AI governance, monitoring, and security best practices

• Collaborate with cybersecurity, IAM, cloud, infrastructure, application, and audit teams

• Improve automation, operational efficiency, and security across enterprise platforms

• Ensure AI-enabled solutions are secure, explainable, auditable, and compliant

Bachelor's degree in Computer Science, Cybersecurity, Information Technology, Engineering, or equivalent professional experience.

• CyberArk Defender or Sentry Certifications

• BeyondTrust, Delinea, or One Identity certifications

• Cloud certifications (AWS or Azure)

• Security certifications such as CISSP, Security+, or similar

• AI, machine learning, or cloud security certifications are a plus

• Hybrid position requiring three days onsite each week

• Candidates may be based in New York, NY; Alpharetta, GA

• Experience working in enterprise or highly regulated environments is strongly preferred

• Strong communication and collaboration skills are essential

• Opportunity to work on cutting-edge AI security and privileged access initiatives

• Candidate must be eligible for W-2 employment

• No Corp-to-Corp (C2C) arrangements

• Must be legally authorized to work in the U.S. without current or future sponsorship

The client is an equal opportunity employer. Employment decisions are made without regard to race, color, religion, sex (including pregnancy and gender identity), national origin, political affiliation, sexual orientation, marital status, disability, genetic information, age, membership in an employee organization, retaliation, parental status, military service, or any other non-merit-based factor.