ZR__JOB

Dallas, United States | Posted on 10/23/2025

PAM is "Privileged Access Management" engineering - a cybersecurity discipline focused on securing, managing, and monitoring privileged accounts and credentials used by administrators, service accounts, and applications.

Location:

3 days a week hybrid Coppell, TX

Employment Type:

Full-time / Contract to Hire after 6 months

The PAM Engineer is responsible for implementation and configuration of Beyond Trust Password Safe including development and maintenance of plugins, connectors, and integrations with various systems. Onboarding accounts/systems with automated credential rotation and session monitoring. Identify and remediate risks related to interactive logins, legacy systems, and service account lockouts.

• 5+ years of experience in PAM engineering, with 2+ years focused on Beyond Trust Password Safe.
• Strong scripting skills (Power Shell, UIPath, etc.) and experience with automation workflows.

Deep understanding of identity governance, privileged access controls, and audit framework

Privileged Access Management (PAM) is a framework of tools and processes designed to control and audit elevated access to critical systems, servers, and data.

A PAM engineer designs, implements, and supports these systems to prevent misuse or compromise of privileged credentials (like root, admin, or service accounts).

A PAM Engineer typically:

Designs and deploys PAM solutions (e.g., Cyber Ark, Beyond Trust, Thycotic/Delinea, One Identity, Hashi Corp Vault).

Integrates PAM with Active Directory, cloud platforms (AWS, Azure, GCP), and enterprise applications.

Automates credential rotation and password vaulting for privileged accounts.

Implements session monitoring, recording, and least-privilege enforcement.

Works with security and compliance teams to meet standards like NIST 800-53, ISO 27001, SOX, and PCI DSS.

Troubleshoots access control issues and ensures continuous privilege governance.