Privileged Access Management; PAM​/IAM Engineer

Pay: $65-75/hour W2. Our company offers our consultants a suite of benefits after a qualification period including health, vision, dental, life and disability insurance. Hybrid Role in Dallas: 3 days onsite / 2 days work from home. W2 candidates highly preferred.

The Privileged Access Management (PAM) Engineer is responsible for the planning, design, implementation, delivery, and ongoing support of enterprise PAM capabilities. This role focuses on protecting privileged accounts, credentials, secrets, and privileged sessions across on-premises, hybrid, and multi-cloud environments. The PAM Engineer will help mature the organization's PAM program by ensuring solutions are secure, scalable, reliable, and aligned with information security requirements.

• Design, implement, administer, and maintain enterprise Privileged Access Management solutions across on-premises, hybrid, and multi-cloud environments.
• Enforce least privilege access models and support secure privileged account lifecycle management.
• Automate credential rotation, password management, secrets management, and privileged access workflows.
• Configure and support privileged session management, monitoring, recording, and audit capabilities.
• Integrate PAM platforms with enterprise systems, including identity providers, directories, cloud platforms, infrastructure, applications, databases, and security tools.
• Develop technical specifications, implementation plans, operational procedures, and support documentation for PAM capabilities.
• Troubleshoot PAM-related issues, incidents, access failures, platform performance concerns, and integration challenges.
• Support compliance, audit, and risk management activities by maintaining accurate records, reporting, and evidence of privileged access controls.
• Partner with IAM, Information Security, Infrastructure, Cloud, Application, and Operations teams to identify privileged access risks and implement secure solutions.
• Assist in defining PAM standards, policies, processes, and roadmap activities under the direction of IAM leadership.

• 5+ years of experience that includes a minimum of 1+ years of PAM experience (at engineer level).
• Hands-on experience supporting Privileged Access Management, Identity and Access Management, information security, or related security engineering functions.
• Experience with enterprise PAM platforms such as Cyber Ark, Beyond Trust, Delinea, Bravura Security, Hashi Corp Vault, or similar technologies.
• Strong understanding of privileged account management, service account governance, secrets management, password vaulting, credential rotation, and access control principles.
• Experience integrating PAM solutions with directories, authentication services, servers, databases, applications, APIs, and cloud platforms.
• Working knowledge of Windows, Linux/Unix, databases, networking concepts, and common enterprise infrastructure patterns.
• Ability to develop clear technical documentation, operational runbooks, process flows, and stakeholder communications.
• Strong analytical, troubleshooting, collaboration, and communication skills.

• Experience with PAM modernization, platform upgrades, disaster recovery planning, and operational resiliency improvements.
• Familiarity with cloud security and secrets management across Microsoft Azure, AWS, Google Cloud, or similar cloud environments.
• Experience with automation, scripting, APIs, CI/CD pipelines, or infrastructure-as-code practices.
• Knowledge of security frameworks, audit requirements, regulatory expectations, and compliance-driven access controls.
• Relevant certifications such as CISSP, Security+, Cyber Ark, Beyond Trust, Delinea, Microsoft Azure, AWS, or other security and cloud certifications.