Principal Privileged Access Management; PAM Lead - CyberArk

Select how often (in days) to receive an alert:

Date:
Jan 2, 2026

Location:

Any city, TX, US, 99999

Work Mode:
Virtual (Exception only)

Be part of a team that unleashes the power of leading-edge technologies to help improve the health and well-being of those most vulnerable in our country and communities. Working at Gainwell carries its rewards. You’ll have an incredible opportunity to grow your career in a company that values work flexibility, learning, and career development. You’ll add to your technical credentials and certifications while enjoying a generous, flexible vacation policy and educational assistance.

We also have comprehensive leadership and technical development academies to help build your skills and capabilities.

We’re looking for a hands‑on PAM leader to own Gainwell’s enterprise Privileged Access Management strategy and execution. This role will lead the end-to-end implementation and ongoing evolution of Cyber Ark across on‑prem, cloud (AWS/Azure), and hybrid environments, establish PAM governance and controls, and partner across Infrastructure, Cloud, Identity, and Compliance teams to measurably reduce privileged risk while enabling the business.

Define and lead Gainwell’s enterprise Privileged Access Management (PAM) vision, roadmap, and operating model, including policies, standards, processes, and measurable KPIs.

Establish strong PAM governance through steering committees, risk reviews, and exception handling, and communicate outcomes and risk reduction to executive stakeholders.

Architect, deploy, and evolve Cyber Ark across on‑prem, cloud (AWS/Azure), and hybrid environments, including Vault/EPV, PVWA, CPM, and PSM.

Drive phased onboarding of privileged identities, starting with Tier 0 and high‑risk accounts and expanding to server, endpoint, and cloud workloads, ensuring stable transition to steady‑state operations.

Implement least‑privilege and just‑in‑time (JIT) access models, privileged elevation and delegation (PEDM), session isolation and auditing, and enterprise secrets management aligned to industry best practices.

Define and enforce privileged access standards, including safe structures, credential rotation, break‑glass procedures, and emergency access controls.

Build and operate scalable PAM processes for onboarding/offboarding, approvals, periodic access reviews, credential lifecycle management, and incident response for privileged misuse.

Strengthen regulatory readiness by ensuring auditability and evidence generation aligned to frameworks such as HIPAA, SOC 2, and NIST.

Partner with Identity, Infrastructure, Cloud, and Dev Ops teams to integrate PAM into CIEM, ITSM, and automation workflows, reducing standing privileges and hard‑coded secrets.

Enable adoption and long‑term success through training programs, stakeholder engagement, and hands‑on leadership as the enterprise PAM subject matter expert.

Manage strategic relationships with Cyber Ark and delivery partners, ensuring platform alignment, continuous improvement, and measurable value realization.

10+ years of experience in Information Security or Identity, including 5+ years leading enterprise PAM initiatives

Proven, hands‑on experience designing, deploying, and operating Cyber Ark (Privilege Cloud or PAS on‑prem), including Vault/EPV, PVWA, CPM, PSM, session recording, and platform/safe configuration

Deep expertise in Active Directory/Azure AD, Windows and Linux systems, AWS and Azure environments, and SIEM integrations

Strong understanding of least privilege, privileged elevation and delegation (PEDM), just‑in‑time (JIT) access, secrets management, and privileged session isolation

Demonstrated ability to build and scale security programs, policies, governance models, and KPIs in complex, cross‑functional environments

Excellent communication, leadership, and change‑management skills

Cyber Ark certifications (Defender, Sentry, Guardian, CDE) or equivalent credentials

Experience transitioning PAM programs from large‑scale rollout to steady‑state operations

Familiarity with…