PAM Engineer

We are looking for a PAM Engineer to join a financial services organization in Chicago, Illinois in a hybrid contract role with a path to permanent employment, working onsite two days per week and remotely three days. This position focuses on strengthening privileged access management capabilities by designing secure solutions, improving access governance, and supporting a resilient security platform. The ideal candidate brings hands-on experience with PAM technologies, a strong understanding of access control best practices, and the ability to collaborate effectively across technical teams.

Responsibilities:
• Design and advance privileged access management architecture that supports secure, scalable, and compliant access practices across the environment.
• Translate business and security needs into technical plans, detailed designs, and actionable implementation roadmaps for PAM solutions.
• Administer privileged accounts by applying best practices, improving service processes, and introducing automation where it adds efficiency and control.
• Define and maintain access policies, entitlement models, and user access controls to support least-privilege principles.
• Lead implementation activities for PAM platform configuration, deployment, maintenance, and ongoing health monitoring.
• Partner with cross-functional teams to strengthen PAM controls, address compliance expectations, and improve overall solution effectiveness.
• Create and maintain operational documentation, support procedures, and troubleshooting guidance for long-term platform support.
• Identify technical obstacles and operational risks, then drive resolution efforts to keep projects and security objectives on track.
• Establish secure session management capabilities and privileged workstation controls to better protect high-risk identities.