Role Overview

The PAM Optimization Engineer will be responsible for enhancing and maintaining Privileged Access Management (PAM) capabilities across virtual machine environments, ensuring secure access, compliance, and operational efficiency. This role focuses on optimizing PAM processes for local accounts, enabling Single Sign-On (SSO), managing machine identities, and integrating with identity governance platforms.

Key Responsibilities

Local Account Management & Optimization
Discover and report existing local accounts on Windows and Linux VMs.
Implement controls to track and manage local accounts effectively.
Enable SSO for Windows and Linux systems via Entra ID integration.
Configure password rotation and session recording through bastion hosts.
PAM Image Management
Work with PAM platform-specific images to ensure compliance and security standards.
Machine Identity Management
Discover and manage machine identities (robot accounts).
Implement conditional access policies for machine identities.
Establish lifecycle management processes and report identity data back to SailPoint.
Integration & Reporting
Ensure PAM processes integrate seamlessly with identity governance and compliance tools.
Provide regular reporting on local accounts, machine identities, and PAM optimization metrics.

Required Skills & Qualifications

Strong experience with PAM solutions and optimization.
Expertise in Windows/Linux administration and SSO configuration (Entra ID).
Knowledge of identity governance platforms (e.g., SailPoint).
Familiarity with bastion host configurations for session recording.
Scripting skills (PowerShell, Python, Bash) for automation and reporting.
Understanding of conditional access and lifecycle management for machine identities.