Cybersecurity Engineer - Privileged Access Management

About This Role

This engineering role focuses on designing, building, and scaling secure, cloud-first identity and privileged access management solutions for a global enterprise. The position involves creating highly automated and reliable identity services, working within the Identity and Access Management team.

Responsibilities

• Design, develop, and enhance IAM and PAM capabilities across authentication, authorization, identity governance, and privileged access management
• Build and maintain integrations using REST APIs, SCIM, web services, and event-driven architectures
• Implement and optimize identity lifecycle processes (provisioning, access requests, deprovisioning, certifications, and privileged access reviews)
• Define and enforce access models and policies (least privilege, Just-in-Time access, break-glass governance) aligned with business and security needs
• Develop automation and reusable services (credential vaulting, password rotation) to improve efficiency and system reliability
• Implement CI/CD pipelines, automated testing, and version-controlled deployments for IAM and PAM solutions
• Enhance observability through logging, monitoring, alerting, service health metrics, and privileged session tracking
• Troubleshoot complex issues, drive root cause analysis, leverage AI-driven automation for identity operations/anomaly detection, and collaborate with security, engineering, and product teams while maintaining documentation, runbooks, and audit/compliance readiness

Requirements

• 3-7 years of IAM engineering experience with 2+ years in direct Privileged Access Management in enterprise or regulated environments
• Strong scripting expertise (Python/PowerShell) with working knowledge of Java or similar programming languages
• Experience in system integration using REST APIs, SCIM, webhooks, and event-driven architectures, with knowledge of authentication protocols (OAuth 2.0, mTLS, API keys, JWT, SAML, OIDC)
• Solid understanding of identity lifecycle management (JML, Active Directory lifecycle) and Non-Human Identity (NHI) security (service accounts, API keys, workload identities)
• Hands-on PAM expertise including credential vaulting, password rotation, privileged session management/monitoring, JIT and least privilege access, break-glass governance, and access reviews/certifications, along with RBAC/ABAC models
• Strong foundation in core security principles (Zero Trust, least privilege, segregation of duties, auditability) with additional exposure to tools like BeyondTrust (Password Safe, DevOps Secrets Safe, PRA, EPM, Insights), ServiceNow integrations, and SailPoint (IIQ/ISC) for IGA/PAM convergence will be a plus
• Experience with cloud platforms (Azure preferred, AWS/GCP) with familiarity of DevOps ecosystem (CI/CD pipelines, Git, automated testing, Terraform, Helm, Kubernetes, Docker)