PAM Engineer
jcw groupCharlotte (NC)
About the role
A globally recognized financial institution is looking to add a senior PAM engineer to its Identity and Access Management (IAM) Architecture and Engineering team. The organization is investing heavily in Zero Trust and privileged identity security across a large, hybrid, multi-cloud environment. This is a hands-on engineering role for someone who wants deep ownership of the CyberArk and Microsoft Entra ID stack, working directly with security, infrastructure, and cloud teams to shape how privileged access is governed across the enterprise.
The Role:
This person will own the design, deployment, and ongoing enhancement of the organization's CyberArk and Entra ID Privileged Identity Management capabilities.
Key responsibilities include:
- Lead deployment, configuration, and enhancement of CyberArk (PVWA, CPM, PSM, Conjur) across on-premises, cloud, and hybrid environments
- Implement and manage Microsoft Entra Privileged Identity Management (PIM) for privileged role governance, approvals, and lifecycle management
- Develop custom CPM plugins and Conjur-based secrets management solutions for non-standard platforms
- Define and enforce least privilege access models (RBAC, ABAC, JIT) across Azure, AWS, GCP, and on-premises platforms
What We're Looking For:
4-6 years in Identity and Access Management with deep, hands-on CyberArk expertise (PVWA, CPM, PSM, Conjur) Strong experience with Microsoft Entra ID, Entra PIM, and Azure RBACExperience securing privileged access for both human and non-human identities across Azure, AWS, and GCPWorking knowledge of OAuth 2.0, OIDC, and SAML, and comfort scripting/automating PAM workflows
Before you apply
Applying takes about a minute. These four things decide how fast it moves after that.
Your profile is current
It's what we read first. Occupations, seniority and locations matter more than a long history.
Two examples you can talk through
Not a portfolio — just two pieces of work where you can explain the decisions and what you'd change.
A number in mind
What you're on now and what would make you move. We negotiate better when we know both.
Your notice period
Employers plan around it, and it's the question that stalls offers most often.
Once you apply, someone reads it and calls you before anything reaches the employer — usually within two working days.
More like this