PAM Engineer
Cary, NC
Category: Security
Industry: Communications
Standard Hours: Open
Reference ID: JN -092026-108707
Date Posted: 10/21/2026
Shortcut: http://careers.eliassen.com/w39zr3
Description:
Hybrid in Cary, NC
Our client seeks a Privileged Access Management (PAM) Engineer to strengthen privileged access security across cloud, on-premises, and hybrid environments. You will engineer and support PAM solutions, reduce privileged access risk, and help advance Just-In-Time access, least privilege, and Zero Standing Privilege across the enterprise.
This is a full-time, permanent opportunity, offering a salary up to $130K plus 10% bonus and yearly equity awards and comprehensive benefits package. Qualified applicants must be willing and able to work on a W2 basis.
Responsibilities:
- Design, implement, and support enterprise PAM solutions across cloud, on-premises, and hybrid environments.
- Engineer privileged access capabilities including credential vaulting, password rotation, session management, privileged account onboarding, break-glass access, and account lifecycle management.
- Support Zero Standing Privilege (ZSP), Just-In-Time (JIT) access, least privilege, RBAC, and privileged access reduction initiatives.
- Secure privileged users, administrative accounts, service accounts, application identities, machine identities, and other non-human identities.
- Partner with infrastructure, cloud, application, and platform teams to onboard systems, applications, servers, databases, endpoints, and cloud resources into PAM platforms.
- Support Microsoft Entra ID capabilities including PIM, MFA, Conditional Access, and other access security controls.
- Develop and maintain privileged access standards, engineering runbooks, and operational procedures.
- Automate identity and privileged access processes using PowerShell, Python, REST APIs, workflow automation, and platform integrations.
- Troubleshoot PAM platform issues, perform root cause analysis, and implement corrective actions.
- Work with Security Operations and other teams to investigate privileged access risks, control gaps, and identity-related security incidents.
- Other duties as assigned.
Experience Requirements:
- 3+ years of experience with PAM, IAM, or identity security solutions in large enterprise environments.
- 2+ years of hands-on experience administering CyberArk, BeyondTrust, Delinea, or an equivalent enterprise PAM platform. CyberArk is not required.
- Strong experience with credential vaulting, password rotation, privileged account onboarding, session management, and account lifecycle management.
- Experience with Zero Standing Privilege (ZSP), Just-In-Time (JIT) access, least privilege, RBAC, and break-glass access.
- Working knowledge of Microsoft Entra ID, PIM, MFA, Conditional Access, and Active Directory.
- Understanding of SSO, federation, authentication, and authorization technologies such as SAML, OAuth 2.0, OIDC, and LDAP.
- Experience with PowerShell, Python, REST APIs, or workflow automation is preferred.
- Ability to assess privileged access risks, identify control gaps, and recommend remediation.
- Approximately 5% travel may be required.
Education Requirements:
Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Engineering, or a related field, or equivalent experience.
Skills, experience, and other compensable factors will be considered when determining pay rate. The pay range provided in this posting reflects a W2 hourly rate; other employment options may be available that may result in pay outside of the provided range.
W2 employees of Eliassen Group who are regularly scheduled to work 30 or more hours per week are eligible for the following benefits: medical (choice of 3 plans), dental, vision, pre-tax accounts, other voluntary benefits including life and disability insurance, 401(k) with match, and sick time if required by law in the worked-in state/locality.
If anyone reaches out to you about an open position connected with Eliassen Group, please ensure that you are working directly with us by confirming the following:
· When you work with Eliassen Group, all email communication will come from an Eliassen.com address, never Gmail, Yahoo, etc.
· Eliassen Group will never ask you for personal information (home address, bank account, or check routing number) until you have worked with someone clearly associated with Eliassen Group.
If you have any indication of fraudulent activity, please contact fraud@eliassen.com.
-
Senior Platform Engineer
Burbank, CA
Description: Hybrid 4 Days a week on-site in either Burbank, CA or Orlando, FL or Seattle, WA Our client seeks a Senior Platform Engineer to drive identity modernization initiatives across Active Directory, Entra ID, and Privileged Access Management. T...
Date Posted: 11/04/2026 Recommended
-
Google Cloud Platform (GCP) Engineer
Washington, DC
Description: On-site in Washington, DC Our client seeks a mid-level Google Cloud Platform (GCP) Engineer to administer and support production GCP environments, drive automation, and assist with migration initiatives. The role emphasizes hands-on engine...
Date Posted: 10/09/2026 Recommended
-
Genetec Support Engineer
Pittsburgh, PA
Description: Hybrid 4 days onsite in Pittsburgh, PA Our client is seeking a Genetec Support Engineer to support a growing, integrated Genetec access control and video solution across a large global user base spanning 100+ locations. You will own end-to...
Date Posted: 10/19/2026 Recommended
-
Senior Infrastructure Engineer
Orlando, FL
Description: Hybrid 4 days on site/1 remote in Orlando, FL Our client seeks a Senior Infrastructure Engineer to support and evolve cloud infrastructure powering analytics platforms, optimization engines, and machine learning workloads. The role will fo...
Date Posted: 11/04/2026 Recommended
-
AI Implementation & Governance Consultant
Orlando, FL
Description: Hybrid 2-3 days on site, maybe flexible after some time in Orlando, FL Our client seeks an AI Implementation & Governance Consultant to lead secure integration of AI tools across the organization. The consultant will deploy solutions, mana...
Date Posted: 11/04/2026 Recommended
-
GRC Analyst
Boston, MA
Description: Hybrid 3 days onsite in Boston, MA Our client seeks a GRC Analyst to implement and maintain governance frameworks, manage risk remediation activities, and ensure adherence to security standards. The role supports requirements gathering and...
Date Posted: 10/29/2026 Recommended
-
Senior Solution Architect – Databricks, Data & AI
Anywhere
Description: Remote Our client is seeking a Senior Solution Architect to provide technical leadership for a large-scale Data & AI modernization initiative. This individual will own the overall architecture and technical direction across Databricks plat...
Date Posted: 11/03/2026 Recommended
-
Cybersecurity Architect
Orange, CA
Description: On-site in Orange, CA Our client has an opportunity for a Cybersecurity Architect supporting the Orange County Sheriff’s Department in Santa Ana, CA. The role provides technical leadership to design, develop, and implement enterprise secur...
Date Posted: 10/20/2026 Recommended
-
Video Management System Admin
Charlotte, NC
Description: Hybrid 3 days on-site in Charlotte, NC Our client seeks a Video Management System Administrator to deploy, configure, integrate, and administer Avigilon ACC 7/8 VMS, NVRs, and Avigilon and Axis IP cameras in a corporate enterprise environm...
Date Posted: 10/28/2026 Recommended
-
Sr. Software Engineer – Identity & Access Management Engineering
Burbank, CA
Description: Hybrid 4 Days a week on-site in Burbank, CA Our client’s Identity & Access Management Engineering team seeks a Senior Software Engineer to build and secure enterprise identity platforms and services that power critical business operations ...
Date Posted: 10/13/2026 Recommended
-
Systems Administrator – Enterprise IT Operations
San Mateo, CA
Description: On-site in San Mateo, CA Our client seeks a Systems Administrator to support, secure, and optimize enterprise IT operations. The role includes end-user system support and endpoint deployment across Mac, Windows, and Linux. The successful c...
Date Posted: 10/18/2026 Recommended
-
PACS Field Specialist
Charlotte, NC
Description: On-site in Charlotte, NC Our client seeks a PACS Field Specialist who will serve as an onsite and field liaison supporting physical access control systems. The role will require frequent travel, adherence to jobsite safety standards, and u...
Date Posted: 11/01/2026 Recommended
-
Senior Cyber Risk Analyst
Pittsburgh, PA
Description:Hybrid 4 days onsite in Pittsburgh, PA Our client seeks a Cyber Risk professional with strong Identity & Access Management experience to identify, analyze, and remediate cyber and control-related risks across a large enterprise. The role wi...
Date Posted: 10/15/2026 Recommended
-
Azure Cloud Security and Databricks Consultant
Anywhere
Description: Remote but King of Prussia, PA or Milwaukee, WI preferred Our client seeks a security-focused Azure and Databricks specialist to support cloud migration and hardening activities associated with a transition services agreement. The consulta...
Date Posted: 10/15/2026 Recommended
-
Senior Software Engineer – UX/UI
Orlando, FL
Description: Hybrid 4 days on site/1 remote in Orlando, FL Our client seeks a Senior Software Engineer – UX/UI to support the Global Information Security Identity and Access Management team. The role will design and develop modern UI applications and r...
Date Posted: 11/01/2026 Recommended
-
Senior Snowflake Platform Engineer
Cincinnati, OH
Description: On-site in Cincinnati, OH Our client seeks a Senior Snowflake Platform Engineer to provide hands-on technical leadership for administration, reliability, security, performance, and cost optimization of the enterprise Snowflake platform. Th...
Date Posted: 10/20/2026 Recommended
-
Senior Cyber Risk Analyst
Pittsburgh, PA
Description: Hybrid 4 days onsite in Pittsburgh, PA Our client seeks a Cyber Risk professional with strong Identity & Access Management expertise and proven project coordination. The role partners with senior leadership to identify, track, analyze, and...
Date Posted: 10/15/2026 Recommended
-
Sr Associate - Asset Projection, Data Controls, & Governance
Anywhere
Description: We are seeking a Senior Associate – Data Controls & Governance to support the evaluation and enhancement of controls surrounding financial and asset projection data. This individual will assess how data is sourced, transformed, stored, gov...
Date Posted: 10/15/2026 Recommended
-
Technical Program Manager, Office Expansion
New York, NY
Description: Hybrid 2-3 days onsite in New York, NY As the Technical Program Manager, Office Expansion, you will deliver IT readiness for new office openings as part of the program management team in Business Technology within IT. You will ensure each ...
Date Posted: 10/22/2026 Recommended
-
Computer Facility Operations Technician
Washington, DC
Description: On-site in Washington, DC Our client seeks a Computer Facility Operations Technician to support data center facility operations, infrastructure monitoring, asset management, equipment logistics, and technical support activities in a federa...
Date Posted: 10/17/2026 Recommended
-
AWS Data Engineer II
Charlotte, NC
Description: Hybrid 3 days on-site in Charlotte, NC Our client seeks a hands-on AWS Data Engineer to own and lead operations for PostgreSQL and Amazon Redshift platforms supporting nuclear data products, reporting, analytics, integrations, and downstre...
Date Posted: 10/25/2026 Recommended
-
Data Analyst
Anywhere
Description: Remote in or Richmond, VA Our client seeks a Data Analyst to partner with business stakeholders to translate needs into data solutions. The role will design metrics and dashboards, deliver business intelligence insights, and drive adherenc...
Date Posted: 10/29/2026 Recommended
-
Workday Adaptive Planning Engineer
Anywhere
Description: Hybrid 3 days onsite / 2 days remote in Rockville, MD Our client is seeking a Workday Adaptive Planning Engineer to design, build, and maintain financial planning and forecasting solutions. The role partners with FP&A, Accounting, and Fina...
Date Posted: 11/02/2026 Recommended
-
Senior Platform Engineer/ISSE
Reston, VA
Description: On-site in Reston, VA Our client seeks a Senior Platform Engineer/ISSE to design, implement, and continuously monitor security controls across containerized and cloud environments. The role will secure Kubernetes platforms, integrate loggi...
Date Posted: 10/26/2026 Recommended
-
Director, Security Architecture & Engagement
Burbank, CA
Description: Hybrid 4 days onsite in Burbank, CA Our client seeks a Director, Security Architecture & Engagement to act as a strategic cybersecurity advisor and trusted partner for business, product, engineering, and technology leaders. The director wi...
Date Posted: 10/08/2026 Recommended
-
Software Engineering Team Lead (Full Stack)
Rockville, MD
Description: Hybrid 3 days onsite / 2 days remote in Rockville, MD Our client seeks an Engineering Team Lead to guide the team building and operating an enterprise-scale identity and access management platform. This hands-on leadership role includes fu...
Date Posted: 11/02/2026 Recommended
-
Senior Specialist, Application Development
New York, NY
Description: Hybrid 3 days on site in New York, NY Our client seeks a Senior Specialist, Application Development to consult with internal business groups and deliver application software development services aligned with business objectives. The role i...
Date Posted: 11/03/2026 Recommended
-
Senior Data Engineer
Farmington Hills, MI
Description: On-site in Farmington Hills, MI Our client seeks a Senior Data Engineer to design, build, and support scalable and secure data solutions for enterprise Wealth & Asset Management applications. The role focuses on data ingestion, transformat...
Date Posted: 11/03/2026 Recommended
-
Manual Quality Assurance Engineer with AI assist and Insurance claims (P&C)
Boston, MA
Description: Hybrid 4 days onsite in Boston, MA (near South Station) Our client is seeking a Sr. Quality Assurance Analyst with strong manual testing expertise to support a high-volume QA organization. The role will develop and execute test plans and c...
Date Posted: 10/26/2026 Recommended
-
QA Engineer/SDET
Anywhere
Description: Hybrid in Ashburn, VA or Gaithersburg, MD Our client seeks Testing and Quality Assurance professionals who develop, implement, and maintain scalable QA systems and standards. The role focuses on CI/CD-integrated automated testing, AI-drive...
Date Posted: 10/26/2026 Recommended
Eliassen Group is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status, or disability status. Eliassen Group’s Affirmative Action Plan (AAP) is available for inspection by any employee or applicant for employment upon request, during normal business hours of Monday through Friday, 8:30am to 5:30pm EST. Interested persons should contact Phaedra Wells at pwells@eliassen.com for assistance. It is unlawful in Massachusetts and Maryland to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.
Applicants with disabilities that believe they require an accommodation or assistance with a position, please email our HR team at hradmin@eliassen.com. This email inbox is designed exclusively to assist job seekers whose disability prevents them from being able to apply online. Emails sent for other purposes will not receive a response.
Please be advised that a number of fraudulent job postings have been released under the Eliassen Group brand.
Unfortunately, fraudulent job postings can happen. If anyone reaches out to you about an open position connected with Eliassen Group, never provide personal or financial information to anyone who is not clearly associated with Eliassen Group
If anyone seemingly from Eliassen Group has ever requested this personal information in the past or does so in the future, please contact fraud@eliassen.com.
Please ensure that you are working directly with us by confirming the following:
- When you work with Eliassen Group, all email communication will come from an Eliassen.com address, never Gmail, Yahoo, etc.
- Eliassen Group will never ask you for personal information (home address, bank account, or check routing number) until you have worked with someone clearly associated with Eliassen Group, as indicated above