Lead Privileged Access Management (PAM) Engineer
Washington, DC
Category: Security
Industry: Government
Reference ID: JN -062026-107230
Date Posted: 06/02/2026
Shortcut: http://careers.eliassen.com/C64V6z
Description:
Hybrid 2 Days Onsite/3 Days Remote in Washington, DC
Our client seeks a Lead Privileged Access Management (PAM) Engineer to design, implement, and operate enterprise PAM solutions across a complex federal hybrid cloud environment. The role manages privileged identities, enforces access controls, and ensures secure access across cloud and on-prem systems. The position requires deep hands-on experience with CyberArk and modern identity platforms, with the ability to integrate PAM into enterprise security architecture and support Zero Trust initiatives.
Due to client requirements, applicants must be willing and able to work on a w2 basis. For our w2 consultants, we offer a great benefits package that includes Medical, Dental, and Vision benefits, 401k with company matching, and life insurance.
Rate: $85.00 to $96.00/hr. w2
Responsibilities:
- Lead design, implementation, and administration of PAM solutions, primarily CyberArk.
- Manage and optimize privileged account lifecycle management, including onboarding, rotation, monitoring, and deprovisioning.
- Configure and support Microsoft Entra PIM for role-based privileged access.
- Integrate PAM solutions with identity providers and SSO platforms such as Okta and Entra ID.
- Develop and enforce policies for privileged access across enterprise systems.
- Coordinate with cybersecurity, infrastructure, and cloud teams to secure privileged access pathways.
- Support PAM strategy and architecture planning across hybrid environments.
- Implement automation and workflows for privileged access provisioning and approvals.
- Perform monitoring, auditing, and reporting on privileged access activity.
- Support compliance with federal security standards and cybersecurity frameworks.
- Provide technical leadership, mentoring, and guidance to junior engineers and administrators.
Experience Requirements:
- 7+ years of experience in identity, access management, or cybersecurity engineering.
- 3+ years specializing in Privileged Access Management.
- Hands-on experience with CyberArk implementation or administration, Microsoft Entra PIM, and Okta or identity/access management integration.
- Expertise in privileged account lifecycle management and PAM architecture across cloud and on-prem environments.
- Experience integrating PAM with enterprise systems and security tools.
- Strong understanding of IAM, RBAC, and privileged access controls.
- Experience supporting enterprise or federal IT environments.
- Exposure to tools and platforms including AWS, Azure, Microsoft Defender, Microsoft Sentinel, Rapid7 InsightVM, Veracode, Jira, Confluence, Device42, Xacta, Intune, Microsoft Purview, Appian, and Oracle.
- Preferred: Experience with federal agencies or regulated environments (FISMA, NIST), familiarity with Zero Trust, scripting with PowerShell or Python, and certifications such as CyberArk Defender/Sentry, CISSP, CISM, or Microsoft Identity.
- Soft skills: Technical leadership, clear communication with diverse stakeholders, ability to operate in complex environments, and strong problem-solving.
Skills, experience, and other compensable factors will be considered when determining pay rate. The pay range provided in this posting reflects a W2 hourly rate; other employment options may be available that may result in pay outside of the provided range.
W2 employees of Eliassen Group who are regularly scheduled to work 30 or more hours per week are eligible for the following benefits: medical (choice of 3 plans), dental, vision, pre-tax accounts, other voluntary benefits including life and disability insurance, 401(k) with match, and sick time if required by law in the worked-in state/locality.
If anyone reaches out to you about an open position connected with Eliassen Group, please ensure that you are working directly with us by confirming the following:
· When you work with Eliassen Group, all email communication will come from an Eliassen.com address, never Gmail, Yahoo, etc.
· Eliassen Group will never ask you for personal information (home address, bank account, or check routing number) until you have worked with someone clearly associated with Eliassen Group.
If you have any indication of fraudulent activity, please contact fraud@eliassen.com.
-
SOC Analyst
Washington, DC
Description: Hybrid 2 Days Onsite/3 Days Remote in Washington, DC Our client seeks a SOC Analyst to support continuous monitoring, detection, analysis, and response to cybersecurity events across hybrid cloud and on-premises environments. The analyst w...
Date Posted: 06/02/2026 Recommended
-
Lead Cybersecurity Engineer
Washington, DC
Description: Hybrid 2 Days Onsite/3 Days Remote in Washington, DC Our client seeks a Lead Cybersecurity Engineer to design and implement enterprise security solutions across a hybrid federal environment. The role will lead engineering initiatives spann...
Date Posted: 06/02/2026 Recommended
-
NOC Analyst
Washington, DC
Description: Hybrid 2 Days Onsite/3 Days Remote in Washington, DC Our client seeks a NOC Analyst to support enterprise network and infrastructure monitoring within a 24x7 federal operations environment. The role encompasses real-time monitoring, event ...
Date Posted: 06/02/2026 Recommended
-
SIEM Engineer
Washington, DC
Description:Hybrid 2 Days Onsite/3 Days Remote in Washington, DC Our client seeks a SIEM Engineer to support enterprise security monitoring, detection engineering, and log management within a federal SOC environment. The role administers SIEM platforms...
Date Posted: 06/02/2026 Recommended
-
Backup Program Manager
Washington, DC
Description: Hybrid 2 Days Onsite/3 Days Remote in Washington, DC Our client seeks a Backup Program Manager to support day-to-day program execution for a large federal cybersecurity and operations program. The role will assist the Program Manager with ...
Date Posted: 06/02/2026 Recommended
-
SOC/NOC Operations Manager
Washington, DC
Description: Hybrid 2 Days Onsite/3 Days Remote in Washington, DC Our client seeks a SOC/NOC Operations Manager to lead 24x7 cybersecurity and network operations within a complex federal enterprise environment. The manager will oversee security and net...
Date Posted: 06/02/2026 Recommended
-
Associate Network Security Engineer
Fenton Cary, NC
Description: Associate Network Security Engineer Cary, NC • Hybrid Our client is seeking an Associate Cybersecurity Engineer for a 12‑month contract, with potential for permanent conversion, to support the Information Security organization. This role f...
Date Posted: 05/31/2026 Recommended
-
Project Manager III – Network & Infrastructure
Denver, CO
Description: Hybrid 4 days onsite in Denver, CO Our client seeks a Project Manager II to lead network and infrastructure initiatives supporting corporate and customer network environments in a large enterprise. The PM will manage full lifecycle deliver...
Date Posted: 05/28/2026 Recommended
-
Tier II Helpdesk Specialist
Denver, CO
Description: On-site 5 days/week in Overland Park, KS Our client seeks a Tier II Helpdesk Specialist to provide onsite technical support for desktops, laptops, printers, peripherals, and core applications. The specialist will record, triage, and resolv...
Date Posted: 05/28/2026 Recommended
-
Project Manager II – Network & Infrastructure
Denver, CO
Description: Hybrid 4 days onsite in Denver, CO The Project Manager II will lead network and infrastructure initiatives across corporate and customer environments for our client during a complex merger integration. The role manages full lifecycle deliv...
Date Posted: 05/07/2026 Recommended
-
Technical Delivery Lead
Anywhere
Description: Remote The Technical Delivery Lead will own end-to-end delivery for complex, enterprise-scale initiatives for our client. Initial focus on modernization of Hr Apps and Azure. The role bridges strategy, enterprise architecture, and executio...
Date Posted: 06/03/2026 Recommended
-
Automation / SOAR Engineer
Washington, DC
Description: Hybrid 2 Days Onsite/3 Days Remote in Washington, DC Our client seeks an Automation / SOAR Engineer to design, develop, and implement automation solutions within a federal cybersecurity operations environment. The role focuses on building ...
Date Posted: 06/02/2026 Recommended
-
Senior Systems Engineer
Fort Meade, MD
Description: On-site in Fort Meade, MD Our client seeks a Senior Systems Engineer to support the Defense Information Systems Agency Citadel mission. The role requires advanced engineering, integration, administration, and operational support for enterp...
Date Posted: 05/19/2026 Recommended
-
Network Administrator
Frisco, TX
Description: Onsite in Frisco, TX Our client seeks a Network Administrator to support enterprise wired and wireless networks across corporate and data center environments. The role will administer LAN/WAN, perform firewall changes, and troubleshoot con...
Date Posted: 06/05/2026 Recommended
-
Technical BA/PO
Charlotte, NC
Description: Hybrid 1x a week onsite in Charlotte, NC Our client seeks a Technical BA/PO to lead requirements, backlog refinement, and user acceptance criteria across a portfolio of enterprise applications supporting finance, digital, operations, and H...
Date Posted: 05/18/2026 Recommended
-
System Administrator - Mid
Cambridge, MA
Description: Hybrid 2 days/ WK in Cambridge, MA Our client seeks a System Administrator - Mid to support a federal program in Cambridge, MA. The role will manage day-to-day administration of Windows-centric infrastructure across on-prem and cloud envir...
Date Posted: 05/19/2026 Recommended
-
Project Manager
Anywhere
Description: Remote Our client seeks a Project Manager to lead technology and data initiatives in a wagile environment. The role will drive data modernization, architecture-led projects, integrations, and technical debt reduction while coordinating acr...
Date Posted: 05/10/2026 Recommended
-
Reporting & Metrics Analyst
Washington, DC
Description: Hybrid 2 Days Onsite/3 Days Remote in Washington, DC Our client seeks a Reporting & Metrics Analyst to support operational, cybersecurity, and compliance reporting within a federal SOC/NOC environment. The role will develop dashboards, tra...
Date Posted: 06/02/2026 Recommended
-
Full Stack Engineer
Westlake, TX
Description: Onsite in Westlake, TX Our client seeks a Full Stack Engineer to design and develop scalable products and APIs that support digital client and advisor appointment experiences. You will contribute to a resilient content platform within the ...
Date Posted: 06/05/2026 Recommended
-
ETL Developer and Analytics Engineer
Woburn, MA
Description: Hybrid Tuesday-Thursday onsite in either Woburn, MA or Cary, NC Our client seeks an OAS analytics/bi specialist who also has ODI experience to design and optimize data integration pipelines, data models, and business intelligence solutions...
Date Posted: 05/14/2026 Recommended
-
Sr. Software Developer II
Washington dc, DC
Description: Onsite in Washington dc, DC The organization seeks a Sr. Software Developer II to deliver secure and reliable software for mission-critical federal systems. The role focuses on building and modernizing enterprise applications using C#, .NE...
Date Posted: 05/15/2026 Recommended
-
Desktop Technician
Fort Totten, ND
Description: On-site in either Fort Totten, ND or Espanola, NM or Aberdeen, SD Our client seeks a Desktop Technician to support Department of the Interior/Indian Affairs users across enterprise environments. The role provides Tier II/III support, insta...
Date Posted: 05/25/2026 Recommended
-
Senior Configuration Management Engineer
herndon, VA
Description: Onsite in herndon, VA Our client seeks a Senior Configuration Management Engineer to lead and mature CM practices for a globally distributed mission system spanning enterprise infrastructure, cloud services, and networks. The role will def...
Date Posted: 05/10/2026 Recommended
-
AWS Cloud / GoLang Software Engineering Consultant
Merrimack, NH
Description: Hybrid 50% on site, locations available in North Carolina office, New Hampshire office, or our world class Texas office Our client seeks a customer-focused Software Engineer to help build and operate containerized services as well as authe...
Date Posted: 05/12/2026 Recommended
-
Principal Systems Analyst
Anywhere
Description: Remote Our client seeks Principal Systems Analysts to drive analysis and documentation supporting the modernization of brokerage, trading, reporting, and data processing systems to AWS. The role requires enterprise systems analysis, strong...
Date Posted: 05/10/2026 Recommended
-
Systems Analyst
Smithfield, RI
Description: Hybrid Onsite 5 days/week, alternating weeks in Smithfield, RI Our client seeks a Data Conversion Systems Analyst to support retirement and defined contribution data migrations. The role defines technical data mapping, improves conversion ...
Date Posted: 05/14/2026 Recommended
-
Cloud & Network Infrastructure Engineer
Washington, DC
Description: On-site 5 days/week in Washington, DC Our client requires a senior Cloud and Network Infrastructure Engineer to lead cloud and on‑premises network design, implementation, and operations. The role focuses on hybrid connectivity, security, a...
Date Posted: 05/09/2026 Recommended
-
Senior Platform / DevOps Engineering Consultant (Java / Kubernetes)
Westlake, TX
Description: 50% hybrid / on site in Westlake TX We are seeking a Senior Platform / DevOps Engineer to join a Platform Engineering team within a large financial services enterprise. This team builds and operates large-scale, cloud-native, event-driven ...
Date Posted: 06/05/2026 Recommended
-
AWS Cloud Architect
Anywhere
Description: Remote Our client seeks a cloud architect to design, implement, and govern secure AWS environments across development, testing, and production. The role covers enterprise architecture, AI implementation support, infrastructure as code, Dev...
Date Posted: 05/31/2026 Recommended
-
Senior Full Stack Software Developer
Anywhere
Description: Remote Our client seeks a Senior Full Stack Software Developer to build and maintain modern web applications with ReactJS, NodeJS, and Microsoft SQL Server. The developer will create responsive interfaces, integrate APIs, and write efficie...
Date Posted: 05/31/2026 Recommended
Eliassen Group is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status, or disability status. Eliassen Group’s Affirmative Action Plan (AAP) is available for inspection by any employee or applicant for employment upon request, during normal business hours of Monday through Friday, 8:30am to 5:30pm EST. Interested persons should contact Phaedra Wells at pwells@eliassen.com for assistance. It is unlawful in Massachusetts and Maryland to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.
Applicants with disabilities that believe they require an accommodation or assistance with a position, please email our HR team at hradmin@eliassen.com. This email inbox is designed exclusively to assist job seekers whose disability prevents them from being able to apply online. Emails sent for other purposes will not receive a response.
Please be advised that a number of fraudulent job postings have been released under the Eliassen Group brand.
Unfortunately, fraudulent job postings can happen. If anyone reaches out to you about an open position connected with Eliassen Group, never provide personal or financial information to anyone who is not clearly associated with Eliassen Group
If anyone seemingly from Eliassen Group has ever requested this personal information in the past or does so in the future, please contact fraud@eliassen.com.
Please ensure that you are working directly with us by confirming the following:
- When you work with Eliassen Group, all email communication will come from an Eliassen.com address, never Gmail, Yahoo, etc.
- Eliassen Group will never ask you for personal information (home address, bank account, or check routing number) until you have worked with someone clearly associated with Eliassen Group, as indicated above