Description

You will design, implement, and run Privileged Access Management across AD/Entra ID, Linux, and major clouds.

Responsibilities

• Own and enhance the enterprise PAM/vault platform, managing privileged credentials across on-prem and cloud.
• Implement credential randomization and approval-based, time-bound access to enforce least privilege/JIT.
• Deploy endpoint privilege management (Windows/Linux/macOS) and application control to replace local admin rights.
• Govern cloud privileged roles (Entra ID/Azure AD, AWS IAM, GCP IAM), integrating with session recording and approvals.
• Lead identity hygiene efforts, monitoring stale privileges and contributing to Zero Trust architecture aligned with NIST policies.

Required Skills

• 3-5+ years in PAM/IAM/security engineering.
• Hands-on experience with AD, Entra ID, Linux, and at least one cloud (Azure/AWS/GCP).
• Experience with vaulting technology and endpoint least-privilege/privilege elevation.
• Knowledge of MFA, SSO, passwordless, Kerberos, and certificate-based authentication.
• Familiarity with Zero Trust, NIST 800-63B, ITDR, and cloud benchmarks (CIS/CSA).
• Scripting and automation using PowerShell, Python, Bash, and Terraform.
• Strong documentation and communication skills.

Key Skills

Education

Any Graduate