Privileged Access Management (PAM) Engineer

Job Description
We are looking for an experienced Privileged Access Management (PAM) Engineer with hands-on expertise in CyberArk and Delinea PAM solutions, AWS cloud security, CI/CD pipeline integration, and DevSecOps practices.
The ideal candidate will be responsible for implementing, configuring, and maintaining enterprise PAM solutions to secure privileged accounts, service accounts, application credentials, and secrets across on-premises and cloud environments.
The candidate should have experience integrating PAM solutions with AWS services and CI/CD tools to enable secure, automated credential management and privileged access governance.
Key Responsibilities

• Implement, configure, and maintain enterprise Privileged Access Management solutions using CyberArk and Delinea.
• Manage privileged accounts, service accounts, application credentials, and secrets across enterprise environments.
• Configure credential vaulting, password rotation, privileged session monitoring, and access controls.
• Integrate PAM solutions with AWS services, including IAM, EC2, and cloud security components.
• Implement secrets management and credential security within CI/CD pipelines.
• Integrate PAM solutions with Jenkins, GitHub Actions, GitLab CI/CD, and Azure DevOps.
• Support application identity management and secure credential delivery.
• Develop automation scripts using PowerShell, Python, or Bash.
• Work with REST APIs to automate PAM operations and integrations.
• Implement RBAC, SSO, MFA, and directory integrations.
• Troubleshoot PAM-related issues and support security governance requirements.
• Maintain technical documentation, operational procedures, and security best practices.

Required Skills

• Hands-on experience with CyberArk PAM and Delinea PAM solutions.
• Strong understanding of Privileged Access Management, credential vaulting, password rotation, and session monitoring.
• Experience with AWS IAM, EC2, IAM roles, and cloud security fundamentals.
• Experience integrating secrets management with CI/CD pipelines.
• Knowledge of Jenkins, GitHub Actions, GitLab CI/CD, or Azure DevOps.
• Understanding of DevSecOps practices and secure software delivery.
• Scripting experience in PowerShell, Python, or Bash.
• Knowledge of REST APIs, RBAC, SSO, MFA, and directory integrations.
• Strong troubleshooting, documentation, and communication skills.

Preferred Skills

• Experience with CyberArk Conjur, Credential Providers, or application identity management.
• Experience with Delinea Secret Server APIs and automation.
• Knowledge of AWS Secrets Manager and AWS Systems Manager Parameter Store.
• Experience with Terraform, CloudFormation, Docker, or Kubernetes.
• Familiarity with NIST, CIS, and ISO 27001 security frameworks.
• CyberArk or Delinea certifications are an advantage.