Privileged Access Management (PAM) Engineer

We are seeking two skilled Privileged Access Management (PAM) Engineers for direct-hire, on-site positions in New York, NY or Alpharetta, GA. The successful candidates will design, implement, and support secure privileged access solutions while integrating AI-driven automation into enterprise security platforms.
Key Responsibilities:

• Design, implement, and maintain enterprise PAM solutions to ensure secure access.
• Build secure, AI-enabled automation to enhance identity and security operations.
• Integrate AI solutions with existing enterprise identity, monitoring, and security platforms.
• Develop and manage secure access controls for privileged, service, and machine identities.
• Ensure all AI-enabled solutions are secure, explainable, auditable, and compliant with enterprise standards.
• Support AI governance, monitoring, and security best practices across the organization.
• Collaborate with cybersecurity, IAM, cloud, infrastructure, application, and audit teams to improve operational efficiency.

• Bachelor's degree in Computer Science, Cybersecurity, Information Technology, Engineering, or equivalent professional experience.
• Hands-on experience with enterprise PAM platforms (e.g., CyberArk, BeyondTrust, Delinea, or One Identity).
• Strong knowledge of privileged access, service accounts, non-human identities, least privilege, RBAC, Just-in-Time (JIT) access, and session management.
• Experience implementing privileged access governance and security controls.
• Experience building or supporting AI, LLM, automation, or platform engineering solutions.
• Knowledge of prompt engineering, model evaluation, hallucination mitigation, drift monitoring, and grounding techniques.
• Experience with agent frameworks, orchestration, and multi-agent workflows.
• Strong understanding of secure software development, cloud-native architectures, APIs, distributed systems, and modern MLOps/LLMOps practices.
• Experience supporting production environments within regulated industries.
• Native or bilingual proficiency in English.
• Must be a resident of New York, NY or Alpharetta, GA, or be able to work on-site in these locations.

• Familiarity with AI governance frameworks (e.g., NIST AI RMF, OWASP Top 10 for LLM Applications, MITRE ATLAS, or ISO).
• Experience with hybrid cloud architecture and securing machine/non-human identities.
• Background in audit, compliance, and regulatory support within financial services or other highly regulated environments.
• Relevant certifications, such as CyberArk (Defender/Sentry), BeyondTrust, Delinea, One Identity, AWS/Azure Cloud, CISSP, Security+, or AI/ML-related credentials.