PAM Engineer -- Hybrid -- W2 Profiles

Role: Privileged Access Management (PAM) Engineer
Location: Hybrid- Fort Worth, TX
Key Responsibilities:

• Implement, configure, and maintain CyberArk and Delinea PAM solutions.
• Manage privileged accounts, service accounts, credentials, and application secrets.
• Configure credential vaulting, automated password rotation, and privileged session monitoring.
• Integrate PAM and secrets management solutions with AWS services, including IAM and EC2.
• Integrate secrets management with CI/CD pipelines to enable secure credential handling.
• Support Jenkins, GitHub Actions, GitLab CI/CD, and Azure DevOps integrations.
• Implement DevSecOps practices and secure software delivery processes.
• Develop automation scripts using PowerShell, Python, or Bash.
• Integrate PAM solutions with REST APIs, RBAC, SSO, MFA, and directory services.
• Troubleshoot PAM-related issues and maintain technical documentation.
• Follow security best practices and applicable compliance standards.

Required Skills

• Hands-on experience with CyberArk PAM and Delinea PAM.
• Strong understanding of privileged access management, credential vaulting, password rotation, and session monitoring.
• Experience with AWS IAM, EC2, IAM roles, and cloud security fundamentals.
• Experience integrating secrets management with CI/CD pipelines.
• Knowledge of Jenkins, GitHub Actions, GitLab CI/CD, or Azure DevOps.
• Understanding of DevSecOps practices and secure software delivery.
• Scripting experience in PowerShell, Python, or Bash.
• Knowledge of REST APIs, RBAC, SSO, MFA, and directory integrations.
• Strong troubleshooting, documentation, and communication skills.

Preferred Skills

• Experience with CyberArk Conjur, Credential Providers, or application identity management.
• Experience with Delinea Secret Server APIs and automation.
• Knowledge of AWS Secrets Manager and AWS Systems Manager Parameter Store.
• Experience with Terraform, CloudFormation, Docker, or Kubernetes.
• Familiarity with NIST, CIS, and ISO 27001 security frameworks.
• CyberArk or Delinea certifications are an advantage