Description

You will design, implement, and manage Privileged Access Management across Active Directory, Entra ID, Linux, and major cloud environments.

This role is hybrid.

Responsibilities

• Own and enhance the enterprise PAM/vault platform, managing privileged credentials across on-prem and cloud infrastructure.
• Implement credential randomization and approval-based, time-bound access to enforce least privilege and JIT principles.
• Deploy endpoint privilege management for Windows, Linux, and macOS to replace local admin rights.
• Govern cloud privileged roles (Entra ID/Azure AD, AWS IAM, GCP IAM) and integrate session recording with approval workflows.
• Lead identity hygiene efforts, monitoring stale privileges and contributing to Zero Trust architecture aligned with NIST policies.

Required Skills

• 3-5+ years in PAM, IAM, or security engineering.
• Hands-on experience with Active Directory, Entra ID, and Linux.
• Experience with at least one major cloud provider (Azure, AWS, or GCP).
• Practical knowledge of vaulting technologies and endpoint least-privilege/elevation tools.
• Understanding of MFA, SSO, passwordless, Kerberos, and certificate-based authentication.
• Familiarity with Zero Trust, NIST 800-63B, ITDR, and cloud benchmarks (CIS/CSA).
• Scripting and automation skills using PowerShell, Python, Bash, and Terraform.

Key Skills

Education

Any Graduate