PAM Engineer
Cary, NC
Category: Security
Industry: Communications
Standard Hours: Open
Reference ID: JN -092026-108707
Date Posted: 10/21/2026
Shortcut: http://careers.eliassen.com/w39zr3
Description:
Hybrid in Cary, NC
Our client seeks a Privileged Access Management (PAM) Engineer to strengthen privileged access security across cloud, on-premises, and hybrid environments. You will engineer and support PAM solutions, reduce privileged access risk, and help advance Just-In-Time access, least privilege, and Zero Standing Privilege across the enterprise.
This is a full-time, permanent opportunity, offering a salary up to $130K plus 10% bonus and yearly equity awards and comprehensive benefits package. Qualified applicants must be willing and able to work on a W2 basis.
Responsibilities:
- Design, implement, and support enterprise PAM solutions across cloud, on-premises, and hybrid environments.
- Engineer privileged access capabilities including credential vaulting, password rotation, session management, privileged account onboarding, break-glass access, and account lifecycle management.
- Support Zero Standing Privilege (ZSP), Just-In-Time (JIT) access, least privilege, RBAC, and privileged access reduction initiatives.
- Secure privileged users, administrative accounts, service accounts, application identities, machine identities, and other non-human identities.
- Partner with infrastructure, cloud, application, and platform teams to onboard systems, applications, servers, databases, endpoints, and cloud resources into PAM platforms.
- Support Microsoft Entra ID capabilities including PIM, MFA, Conditional Access, and other access security controls.
- Develop and maintain privileged access standards, engineering runbooks, and operational procedures.
- Automate identity and privileged access processes using PowerShell, Python, REST APIs, workflow automation, and platform integrations.
- Troubleshoot PAM platform issues, perform root cause analysis, and implement corrective actions.
- Work with Security Operations and other teams to investigate privileged access risks, control gaps, and identity-related security incidents.
- Other duties as assigned.
Experience Requirements:
- 3+ years of experience with PAM, IAM, or identity security solutions in large enterprise environments.
- 2+ years of hands-on experience administering CyberArk, BeyondTrust, Delinea, or an equivalent enterprise PAM platform. CyberArk is not required.
- Strong experience with credential vaulting, password rotation, privileged account onboarding, session management, and account lifecycle management.
- Experience with Zero Standing Privilege (ZSP), Just-In-Time (JIT) access, least privilege, RBAC, and break-glass access.
- Working knowledge of Microsoft Entra ID, PIM, MFA, Conditional Access, and Active Directory.
- Understanding of SSO, federation, authentication, and authorization technologies such as SAML, OAuth 2.0, OIDC, and LDAP.
- Experience with PowerShell, Python, REST APIs, or workflow automation is preferred.
- Ability to assess privileged access risks, identify control gaps, and recommend remediation.
- Approximately 5% travel may be required.
Education Requirements:
Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Engineering, or a related field, or equivalent experience.
Skills, experience, and other compensable factors will be considered when determining pay rate. The pay range provided in this posting reflects a W2 hourly rate; other employment options may be available that may result in pay outside of the provided range.
W2 employees of Eliassen Group who are regularly scheduled to work 30 or more hours per week are eligible for the following benefits: medical (choice of 3 plans), dental, vision, pre-tax accounts, other voluntary benefits including life and disability insurance, 401(k) with match, and sick time if required by law in the worked-in state/locality.
If anyone reaches out to you about an open position connected with Eliassen Group, please ensure that you are working directly with us by confirming the following:
· When you work with Eliassen Group, all email communication will come from an Eliassen.com address, never Gmail, Yahoo, etc.
· Eliassen Group will never ask you for personal information (home address, bank account, or check routing number) until you have worked with someone clearly associated with Eliassen Group.
If you have any indication of fraudulent activity, please contact fraud@eliassen.com.
-
Senior Platform Engineer
Burbank, CA
Description: Hybrid 4 Days a week on-site in either Burbank, CA or Orlando, FL or Seattle, WA Our client seeks a Senior Platform Engineer to drive identity modernization initiatives across Active Directory, Entra ID, and Privileged Access Management. T...
Date Posted: 10/05/2026 Recommended
-
Google Cloud Platform (GCP) Engineer
Washington, DC
Description: On-site in Washington, DC Our client seeks a mid-level Google Cloud Platform (GCP) Engineer to administer and support production GCP environments, drive automation, and assist with migration initiatives. The role emphasizes hands-on engine...
Date Posted: 10/09/2026 Recommended
-
Genetec Support Engineer
Pittsburgh, PA
Description: Hybrid 4 days onsite in Pittsburgh, PA Our client is seeking a Genetec Support Engineer to support a growing, integrated Genetec access control and video solution across a large global user base spanning 100+ locations. You will own end-to...
Date Posted: 10/19/2026 Recommended
-
AI Implementation & Governance Consultant
Orlando, FL
Description: Hybrid 2-3 days on site, maybe flexible after some time in Orlando, FL Our client seeks an AI Implementation & Governance Consultant to lead secure integration of AI tools across the organization. The consultant will deploy solutions, mana...
Date Posted: 10/05/2026 Recommended
-
Cybersecurity Architect
Orange, CA
Description: On-site in Orange, CA Our client has an opportunity for a Cybersecurity Architect supporting the Orange County Sheriff’s Department in Santa Ana, CA. The role provides technical leadership to design, develop, and implement enterprise secur...
Date Posted: 10/20/2026 Recommended
-
Cybersecurity Engineer
Washington, DC
Description: Hybrid (on-site work) as needed in Washington, DC Our client seeks a seasoned cybersecurity professional to lead assessments, implement and manage controls, and guide incident response for an enterprise environment. The role will evaluate ...
Date Posted: 10/22/2026 Recommended
-
Sr. Software Engineer – Identity & Access Management Engineering
Burbank, CA
Description: Hybrid 4 Days a week on-site in Burbank, CA Our client’s Identity & Access Management Engineering team seeks a Senior Software Engineer to build and secure enterprise identity platforms and services that power critical business operations ...
Date Posted: 10/13/2026 Recommended
-
Systems Administrator – Enterprise IT Operations
San Mateo, CA
Description: On-site in San Mateo, CA Our client seeks a Systems Administrator to support, secure, and optimize enterprise IT operations. The role includes end-user system support and endpoint deployment across Mac, Windows, and Linux. The successful c...
Date Posted: 10/18/2026 Recommended
-
Senior Cyber Risk Analyst
Pittsburgh, PA
Description:Hybrid 4 days onsite in Pittsburgh, PA Our client seeks a Cyber Risk professional with strong Identity & Access Management experience to identify, analyze, and remediate cyber and control-related risks across a large enterprise. The role wi...
Date Posted: 10/15/2026 Recommended
-
Azure Cloud Security and Databricks Consultant
Anywhere
Description: Remote but King of Prussia, PA or Milwaukee, WI preferred Our client seeks a security-focused Azure and Databricks specialist to support cloud migration and hardening activities associated with a transition services agreement. The consulta...
Date Posted: 10/15/2026 Recommended
-
Azure Oracle Database Engineer
Lake Mary, FL
Description: Hybrid 4 days onsite in either Lake Mary, FL or Pittsburgh, PA or New York, NY Our client is seeking a contractor Azure Oracle Database Engineer to design, operate, and secure Azure Oracle database services. The engineer will implement str...
Date Posted: 09/28/2026 Recommended
-
Senior Cyber Risk Analyst
Pittsburgh, PA
Description: Hybrid 4 days onsite in Pittsburgh, PA Our client seeks a Cyber Risk professional with strong Identity & Access Management expertise and proven project coordination. The role partners with senior leadership to identify, track, analyze, and...
Date Posted: 10/15/2026 Recommended
-
Senior Snowflake Platform Engineer
Cincinnati, OH
Description: On-site in Cincinnati, OH Our client seeks a Senior Snowflake Platform Engineer to provide hands-on technical leadership for administration, reliability, security, performance, and cost optimization of the enterprise Snowflake platform. Th...
Date Posted: 10/20/2026 Recommended
-
Sr Associate - Asset Projection, Data Controls, & Governance
Anywhere
Description: We are seeking a Senior Associate – Data Controls & Governance to support the evaluation and enhancement of controls surrounding financial and asset projection data. This individual will assess how data is sourced, transformed, stored, gov...
Date Posted: 10/15/2026 Recommended
-
Computer Facility Operations Technician
Washington, DC
Description: On-site in Washington, DC Our client seeks a Computer Facility Operations Technician to support data center facility operations, infrastructure monitoring, asset management, equipment logistics, and technical support activities in a federa...
Date Posted: 10/17/2026 Recommended
-
AWS Data Engineer II
Charlotte, NC
Description: Hybrid 3 days on-site in Charlotte, NC Our client seeks a hands-on AWS Data Engineer to own and lead operations for PostgreSQL and Amazon Redshift platforms supporting nuclear data products, reporting, analytics, integrations, and downstre...
Date Posted: 10/25/2026 Recommended
-
Workday Integration & Support Engineer
Anywhere
Description: Remote Our client seeks a Workday Integration and Support Engineer to support and improve Workday Financials, HCM, Payroll, Planning, and related enterprise systems. The role will partner with Finance, IT, HR, Payroll, vendors, and impleme...
Date Posted: 10/04/2026 Recommended
-
Sr. Security Engineer (Trellix)
Washington dc, DC
Description: On-site in Washington, DC As a Sr. Security Engineer (Trellix), you will serve as the technical lead for our client's endpoint security and data protection ecosystem. You will balance day-to-day operational support with strategic cybersecu...
Date Posted: 10/24/2026 Recommended
-
VDI Engineer
Anywhere
Description: Remote Our client seeks a VDI Engineer to architect, build, and optimize a next-generation global Virtual Desktop Infrastructure in Microsoft Azure. The role includes design, deployment, performance tuning, and cost optimization of Citrix-...
Date Posted: 09/29/2026 Recommended
-
Senior Platform Engineer/ISSE
Reston, VA
Description: On-site in Reston, VA Our client seeks a Senior Platform Engineer/ISSE to design, implement, and continuously monitor security controls across containerized and cloud environments. The role will secure Kubernetes platforms, integrate loggi...
Date Posted: 10/26/2026 Recommended
-
Director, Security Architecture & Engagement
Burbank, CA
Description: Hybrid 4 days onsite in Burbank, CA Our client seeks a Director, Security Architecture & Engagement to act as a strategic cybersecurity advisor and trusted partner for business, product, engineering, and technology leaders. The director wi...
Date Posted: 10/08/2026 Recommended
-
Data Engineering Lead
Charlotte, NC
Description: Hybrid 3 days on-site in Charlotte, NC Our client seeks a senior data engineering leader who will drive hands-on development while setting technical direction across multiple initiatives. The role requires expertise in architecting, buildi...
Date Posted: 10/10/2026 Recommended
-
Vice President, Application Support Engineer
Lake Mary, FL
Description: Hybrid 4 days onsite in Lake Mary, FL Our client seeks a Vice President, Application Support Engineer for the Depositary Receipts Platform Engineering team. The role focuses on production support, root cause analysis, performance monitorin...
Date Posted: 10/19/2026 Recommended
-
QA Engineer/SDET
Anywhere
Description: Hybrid in Ashburn, VA or Gaithersburg, MD Our client seeks Testing and Quality Assurance professionals who develop, implement, and maintain scalable QA systems and standards. The role focuses on CI/CD-integrated automated testing, AI-drive...
Date Posted: 10/26/2026 Recommended
-
Senior Network Security Engineer
Anywhere
Description: Remote Our client seeks a Senior Network Security Engineer to secure, scale, and strengthen a global network infrastructure. The role will focus on Palo Alto Networks platforms, firewall architecture, segmentation, secure remote access, VP...
Date Posted: 10/01/2026 Recommended
-
Senior Software Engineer
Gaithersburg, MD
Description: Our client seeks multiple Software Development resources to build and maintain Java-centric, cloud-native services within a secure, regulated environment. The team delivers containerized microservices on AWS using ECS, EKS, and OpenShift, ...
Date Posted: 10/26/2026 Recommended
-
API Developer III
Anywhere
Description: Remote Our client seeks an API Developer III to design, develop, and maintain APIs and integrations that support a broad digital ecosystem. The role will leverage Microsoft Azure services such as API Management, Application Gateway, and Lo...
Date Posted: 10/13/2026 Recommended
-
Lead Software Engineer
Charlotte, NC
Description: Hybrid Tuesday/Thursday in Charlotte, NC or Mooresville, NC Our client seeks a Lead Software Engineer to own end-to-end technical delivery for Levelpath/Jaggaer procurement platform integrations. The role will lead configurations and workf...
Date Posted: 10/05/2026 Recommended
-
Security Engineer
Anywhere
Description: Remote in either Cincinnati, OH Our client seeks a Senior Security Engineer to support the vulnerability management lifecycle. The role will maintain and operate scanning capabilities, analyze findings, develop remediation guidance, and co...
Date Posted: 10/08/2026 Recommended
-
Sr. Cloud Engineer
Anywhere
Description: Remote Our client is seeking a Sr. Cloud Engineer (Azure) to design, deploy, secure, and optimize enterprise cloud infrastructure within Microsoft Azure for federal customers. The role includes implementing scalable cloud solutions, automa...
Date Posted: 10/19/2026 Recommended
Eliassen Group is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status, or disability status. Eliassen Group’s Affirmative Action Plan (AAP) is available for inspection by any employee or applicant for employment upon request, during normal business hours of Monday through Friday, 8:30am to 5:30pm EST. Interested persons should contact Phaedra Wells at pwells@eliassen.com for assistance. It is unlawful in Massachusetts and Maryland to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.
Applicants with disabilities that believe they require an accommodation or assistance with a position, please email our HR team at hradmin@eliassen.com. This email inbox is designed exclusively to assist job seekers whose disability prevents them from being able to apply online. Emails sent for other purposes will not receive a response.
Please be advised that a number of fraudulent job postings have been released under the Eliassen Group brand.
Unfortunately, fraudulent job postings can happen. If anyone reaches out to you about an open position connected with Eliassen Group, never provide personal or financial information to anyone who is not clearly associated with Eliassen Group
If anyone seemingly from Eliassen Group has ever requested this personal information in the past or does so in the future, please contact fraud@eliassen.com.
Please ensure that you are working directly with us by confirming the following:
- When you work with Eliassen Group, all email communication will come from an Eliassen.com address, never Gmail, Yahoo, etc.
- Eliassen Group will never ask you for personal information (home address, bank account, or check routing number) until you have worked with someone clearly associated with Eliassen Group, as indicated above