About This Role
This engineering role focuses on securing privileged access across enterprise systems by implementing advanced Privileged Access Management (PAM) solutions. The role leverages Artificial Intelligence (AI) and Machine Learning (ML) to enhance threat detection, automation, and decision-making, blending cybersecurity engineering with AI-driven analytics to proactively identify risks, automate privileged access controls, and enable adaptive security frameworks.
Responsibilities
- Design, implement, and manage PAM solutions using CyberArk, BeyondTrust, Delinea, and HashiCorp Vault
- Configure privileged account onboarding and lifecycle management
- Configure password vaulting, rotation, and credential management
- Configure Privileged Session Management (PSM)
- Implement Just-In-Time (JIT) and Just-Enough-Access (JEA) models
- Develop and integrate AI/ML models to detect anomalous privileged access behavior
- Identify insider threats and suspicious activity
- Predict and prevent access misuse
- Use AI for behavioral analytics (UEBA User & Entity Behavior Analytics)
- Use AI for risk-based authentication and access decisions
- Implement intelligent automation for privileged account onboarding/offboarding
- Implement intelligent automation for access approvals and policy enforcement
- Leverage AI-enabled SIEM tools (e.g., Splunk, Microsoft Sentinel) for real-time monitoring of privileged sessions
- Leverage AI-enabled SIEM tools for automated alert prioritization
- Implement session recording and playback
- Implement AI-driven anomaly detection and alert tuning
- Support incident response and forensic investigations
- Integrate PAM with IAM systems (Entra ID, Okta, SailPoint)
- Integrate PAM with security tools (SIEM, SOAR, EDR/XDR)
- Integrate PAM with cloud platforms (AWS, Azure, GCP)
- Work with APIs, REST services, and JSON
- Work with data pipelines for feeding security analytics platforms
- Build AI-ready datasets from logs and access activity
- Enforce least privilege access
- Enforce Zero Trust principles
- Support compliance with SOX, GDPR, PCI-DSS, ISO 27001
- Generate AI-assisted compliance reports and audit insights
- Contribute to policy definition and governance frameworks
- Develop scripts and automation workflows using Python, PowerShell, and Bash
- Integrate PAM into CI/CD pipelines (DevSecOps)
- Implement AI-assisted remediation workflows using SOAR tools
- Partner with security operations (SOC) teams
