Privileged Access Management (PAM) Engineer

We are seeking a PAM Engineer – AI & Automation to design, implement, and manage enterprise privileged access solutions while leveraging AI, automation, and analytics to strengthen identity security and threat detection.

Responsibilities

• Design, implement, and manage PAM solutions such as CyberArk, BeyondTrust, Delinea, and HashiCorp Vault.
• Manage privileged account onboarding, credential vaulting, rotation, lifecycle management, and Privileged Session Management (PSM).
• Implement Least Privilege, Just-In-Time (JIT), Just-Enough-Access (JEA), and Zero Trust controls.
• Integrate PAM with Entra ID, Okta, SailPoint, Splunk, Microsoft Sentinel, SOAR, EDR/XDR, AWS, Azure, and GCP.
• Develop AI/ML-driven capabilities for anomaly detection, privileged-user behavior analytics, risk scoring, and threat identification.
• Build automation for account provisioning, access approvals, credential rotation, policy enforcement, and remediation.
• Develop scripts and integrations using Python, PowerShell, Bash, REST APIs, and JSON.
• Integrate PAM controls into DevSecOps/CI-CD pipelines and security automation workflows.
• Support security monitoring, incident response, forensic investigations, audits, and compliance requirements including SOX, PCI DSS, GDPR, and ISO 27001.
• Collaborate with IAM, SOC, cloud security, GRC, and AI/ML teams to continuously improve privileged access security.

Required Skills

• Strong hands-on experience with one or more enterprise PAM platforms.
• Experience with IAM, SIEM, cloud security, and security automation.
• Strong scripting and API integration skills.
• Understanding of AI/ML, UEBA, behavioral analytics, and risk-based access controls.
• Strong knowledge of Zero Trust, Least Privilege, JIT/JEA, and privileged identity security.