Lead PAM Engineer – Senior
Location: National Capital Region (Washington, DC) – Hybrid/Onsite
Clearance: Must be able to pass background check (U.S. work authorization required)
Salary: $120,000-$150,000
Position Overview
We are seeking a Senior Lead PAM Engineer to design, implement, and manage enterprise Privileged Access Management (PAM) solutions across hybrid environments. This role is responsible for securing privileged identities, enforcing least-privilege access, and ensuring compliance with enterprise cybersecurity and identity governance requirements.
Key Responsibilities
- Lead planning, implementation, and support of PAM platforms across enterprise environments
- Onboard and manage:
- Privileged accounts
- Vaults and safes
- Credential rotation policies
- Connection components
- Configure and support:
- Privileged session monitoring
- Audit logging and reporting
- Access reviews and governance processes
- Break-glass procedures
- Integrate PAM platforms with:
- Active Directory / Entra ID
- SIEM and logging systems
- Identity governance tools
- Endpoint and cloud environments
- Design PAM architecture and develop:
- High-level and low-level design documentation
- Implementation plans
- SOPs and operational runbooks
- Troubleshoot access, authentication, policy, and integration issues
- Collaborate with SOC, NOC, and compliance teams to ensure security alignment
- Support Zero Trust and least-privilege access strategies
Required Qualifications
- 8+ years of experience in:
- Cybersecurity engineering
- Identity & Access Management (IAM)
- Privileged Access Management (PAM)
- Enterprise security or infrastructure security
- 5+ years of hands-on experience with:
- PAM / IAM platforms
- Privileged credential lifecycle management
- Access control implementation
- Experience supporting environments across:
- On-premise
- Cloud
- Hybrid architectures
Technical Expertise
- PAM / IAM Platforms:
- CyberArk
- Microsoft Entra ID / Entra PIM
- SailPoint
- Okta
- BeyondTrust
- Delinea
- Identity & Access Technologies:
- Active Directory / LDAP
- SAML, OAuth
- MFA, RBAC
- PKI / PIV/CAC
- Core Capabilities:
- Privileged account onboarding and vaulting
- Credential rotation and lifecycle management
- Session monitoring and auditing
- Access governance and reviews
Frameworks & Methodologies
- Knowledge of:
- NIST frameworks
- Zero Trust architecture
- ICAM / FICAM principles
- Identity governance and compliance
Education
- Bachelor's degree in Cybersecurity, IT, Computer Science, Engineering, or related field (or equivalent experience)
Certifications
(Preferred/Required)- CISSP, PMP, or equivalent cybersecurity certifications
- PAM/IAM platform certifications (CyberArk, Microsoft Identity, Okta, SailPoint, etc.)
Additional Qualifications
- Experience designing enterprise PAM architecture
- Strong documentation and communication skills
- Ability to train stakeholders and present to leadership
- Experience working in regulated or federal environments preferred
Ideal Candidate Profile
- Hands-on PAM engineer with architecture-level experience
- Strong background in identity security and access governance
- Experienced in enterprise-scale deployments and integrations
- Comfortable leading technical initiatives and mentoring teams
- Detail-oriented with strong troubleshooting and analytical skills