PAM Engineer

A globally recognized financial institution is looking to add a senior PAM engineer to its Identity and Access Management (IAM) Architecture and Engineering team. The organization is investing heavily in Zero Trust and privileged identity security across a large, hybrid, multi-cloud environment.

This is a hands-on engineering role for someone who wants deep ownership of the Cyber Ark and Microsoft Entra , working directly with security, infrastructure, and cloud teams to shape how privileged access is governed across the enterprise.

This person will own the design, deployment, and ongoing enhancement of the organization's Cyber Ark and Entra  Identity Management capabilities.

• Lead deployment, configuration, and enhancement of Cyber Ark (PVWA, CPM, PSM, Conjur) across on-premises, cloud, and hybrid environments
• Implement and manage Microsoft Entra Privileged Identity Management (PIM) for privileged role governance, approvals, and lifecycle management
• Develop custom CPM plugins and Conjur-based secrets management solutions for non-standard platforms
• Define and enforce least privilege access models (RBAC, ABAC, JIT) across Azure, AWS, GCP, and on-premises platforms

• 4-6 years in Identity and Access Management with deep, hands-on Cyber Ark expertise (PVWA, CPM, PSM, Conjur)
• Strong experience with Microsoft Entra , Entra PIM, and Azure RBAC
• Experience securing privileged access for both human and non-human identities across Azure, AWS, and GCP
• Working knowledge of OAuth 2.0, OIDC, and SAML, and comfort scripting/automating PAM workflows