PAM Engineer

A globally recognized financial institution is looking to add a senior PAM engineer to its Identity and Access Management (IAM) Architecture and Engineering team. The organization is investing heavily in Zero Trust and privileged identity security across a large, hybrid, multi-cloud environment. This is a hands-on engineering role for someone who wants deep ownership of the CyberArk and Microsoft Entra ID stack, working directly with security, infrastructure, and cloud teams to shape how privileged access is governed across the enterprise. The Role This person will own the design, deployment, and ongoing enhancement of the organization's CyberArk and Entra ID Privileged Identity Management capabilities. Key responsibilities include: Lead deployment, configuration, and enhancement of CyberArk (PVWA, CPM, PSM, Conjur) across on-premises, cloud, and hybrid environments Implement and manage Microsoft Entra Privileged Identity Management (PIM) for privileged role governance, approvals, and lifecycle management Develop custom CPM plugins and Conjur-based secrets management solutions for non-standard platforms Define and enforce least privilege access models (RBAC, ABAC, JIT) across Azure, AWS, GCP, and on-premises platforms What We're Looking For 4-6 years in Identity and Access Management with deep, hands-on CyberArk expertise (PVWA, CPM, PSM, Conjur) Strong experience with Microsoft Entra ID, Entra PIM, and Azure RBAC Experience securing privileged access for both human and non-human identities across Azure, AWS, and GCP Working knowledge of OAuth 2.0, OIDC, and SAML, and comfort scripting/automating PAM workflows #J-18808-Ljbffr JCW Group