PAM Platform Engineer

Job Title

Privileged Access Management - Beyond Trust Engineer

Seattle, WA 98101

06+ month contract (with possible extension)

$97.31/hr on W2

As a PAM Platform Engineer on Client's Identity & Access Management team, you'll be a key technical specialist responsible for designing, implementing, and maintaining our enterprise-wide Privileged Access Management infrastructure using Beyond Trust. You'll lead the rollout of Beyond Trust and support ongoing management of our privileged access solutions, including password management, endpoint privilege management, and session management capabilities across our retail technology ecosystem.

Join our cybersecurity team to drive enterprise-level PAM adoption while maintaining Client's commitment to innovation, security excellence, and work-life balance.

• PAM Platform Leadership:
  Serve as the primary technical expert for privileged access management solutions, including architecture, deployment, configuration, and optimization of password vaults and endpoint privilege management systems
• Enterprise PAM Implementation:
  Design and execute large-scale PAM deployments across Windows, macOS, and Linux environments, ensuring seamless integration with existing infrastructure
• Policy Development & Management:
  Create and maintain privilege elevation policies, credential rotation schedules, access request workflows, and governance rules aligned with security and compliance requirements
• Integration & Automation:
  Integrate PAM solutions with ITSM platforms, SIEM tools, vulnerability scanners, directory services, and other security infrastructure to create comprehensive privileged access workflows
• Troubleshooting & Support:
  Provide expert-level technical support for PAM platform issues, performance optimization, privileged account onboarding, and user access requests
• Security & Compliance:
  Ensure PAM implementations meet PCI DSS, and other requirements through proper audit trails, session recording and monitoring, and privileged account governance
• Documentation & Training:
  Develop technical documentation, procedures, and training materials for internal teams and end users
• Continuous Improvement:
  Monitor platform performance, evaluate new features, and implement best practices to enhance security posture and operational efficiency

• 4-6+ years of hands-on experience implementing and managing Beyond Trust PAM at the Enterprise level.
• Beyond Trust certifications are preferred.
• Deep expertise in privileged account discovery, credential management, password rotation, session management, and access request workflows using Beyond Trust
• Strong understanding of Windows Server administration, Active Directory, Group Policy, and Power Shell scripting
• Experience with Linux/Unix system administration and shell scripting for cross-platform Beyond Trust PAM deployments
• Knowledge of networking fundamentals including protocols, ports, certificates, load balancing, and security hardening
• Experience with cloud platforms (AWS, Azure) and containerization technologies (Docker, Kubernetes)
• Understanding of identity and access protocols (SAML, OIDC, OAuth, SCIM, LDAP) and their integration with PAM solutions

• Knowledge of Dev Ops practices, CI/CD pipelines, and Infrastructure as Code (Terraform, Ansible)
• Familiarity with ITSM integration (Service Now, Jira) for ticket-driven privileged access workflows
• Experience with SIEM integration and security monitoring platforms (Splunk, QRadar, etc.)
• Understanding of zero trust architecture and least privilege access principles
• Experience with secrets management platforms (Hashi Corp Vault, AWS Secrets Manager, Azure Key Vault)
• Previous experience in retail technology environments or large-scale enterprise deployments
• Industry certifications such as CISSP, CISM, or relevant cloud security certifications

• PAM Platforms:
  Experience with Beyond Trust.
• Operating Systems:
  Windows Server (2016/2019/2022), Windows 10/11, macOS, RHEL, Ubuntu, SUSE
• Databases: SQL Server, MySQL, Postgre
  
  SQL, Oracle for PAM backend configuration
• Virtualization: VMware vSphere, Hyper-V, cloud-based virtual machines
• Scripting:
  Power Shell, Bash, Python for automation and integration tasks
• Security Tools:
  Integration experience with vulnerability scanners, endpoint detection tools, and identity governance platforms