Consulting Privileged Access Engineer

HCA Healthcare; Nashville (TN); On-site; USD 140,000 - 170,000; Full time

Benefits offered by this job

Comprehensive benefits

401(k) match

Tuition assistance

Job summary

HCA Healthcare is seeking a Consulting Privileged Access Engineer to design, implement, and maintain robust PAM solutions across enterprise environments. You will lead initiatives, mentor junior engineers, and collaborate with the IPS department to strengthen cybersecurity posture.

The role emphasizes ownership, leadership, and the ability to work with minimal supervision while delivering secure, efficient access management and governance.

Qualifications

• Bachelor's degree in Information Systems preferred.
• Seven+ years in Identity and Access or System Engineering.
• PAM-specific Certifications preferred.
• CISSP preferred.
• Microsoft security certifications preferred.
• CISM preferred.

Responsibilities

• Collaborate with teams to understand privileged access requirements and security challenges.
• Develop PAM strategies aligned with business objectives and regulatory requirements.
• Provide guidance on privileged access governance and risk management.
• Deploy and configure PAM solutions with existing infrastructure and processes.
• Engage with teams to ensure successful PAM tool adoption and testing.
• Maintain PAM solutions with security patches and enhancements.
• Provide ongoing guidance to manage privileged access workflows.
• Conduct risk assessments and security audits related to privileged access.
• Educate teams on PAM importance and best practices.
• Create comprehensive PAM documentation and records.
• Collaborate with cybersecurity professionals for holistic security.

Skills

Privileged Access

PAM knowledge

Cybersecurity

IAM concepts

DevOps

Service & Quality

Decision Making

Leadership

Communication

Change Management

Education

Bachelor's degree Information Systems

CISSP Certification

CISM Certification

Microsoft security certifications

Tools

PowerShell

APIs

Scripting languages

Password vaults

Session recording

Access control systems

Job description

Last year our HCA Healthcare colleagues invested over 156,000 hours volunteering in our communities. As a Consulting Privileged Access Engineer with HCA Healthcare you can be a part of an organization that is devoted to giving back!

Job Summary And Qualifications

We are seeking a highly skilled Consulting Privileged Access Engineer to join our dynamic team. The ideal candidate will have extensive experience in managing and securing privileged access within enterprise environments. They will lead initiatives to design, implement, and maintain robust privileged access management (PAM) solutions for our organization. The successful candidate will work independently and collaboratively to ensure critical systems and data are protected from unauthorized access, while also enabling efficient and secure operations. They will take ownership of projects, provide expert guidance, and operate with minimal supervision, demonstrating a high degree of autonomy and leadership. This role will also mentor junior engineers, fostering a collaborative and learning environment. They will exhibit a high degree of self-motivation as well as possess excellent analytical, communication, documentation, and relationship-building skills. This role will also work closely with the Information Protection and Security (IPS) department to implement and support technologies that achieve the organization’s cybersecurity goals.

Consultation and Strategy

• Collaborate with teams to understand their specific privileged access requirements and security challenges.
• Develop customized PAM strategies that align with teams' business objectives and regulatory requirements.
• Provide expert advice and best practices for privileged access governance and risk management.

Implementation

• Deploy and configure PAM solutions, ensuring seamless integration with existing infrastructure, processes, and applications.
• Engage with teams to ensure successful implementation and adoption of PAM tools and processes.
• Conduct thorough testing and validation of PAM solutions to ensure they meet security and performance standards.
• Provide ongoing guidance and support to teams to ensure they can effectively manage privileged access.

Maintenance and Support

• Serve as an escalation engineer for support and troubleshooting technical issues.
• Deliver metric reporting (dashboards, etc.) that supports the effectiveness of the PAM program and solutions.
• Ensure that PAM solutions are properly maintained with the latest security patches and enhancements.
• Provide ongoing guidance and support to teams to ensure they can effectively manage their privileged access workflows.

Risk Assessment

• Conduct comprehensive risk assessments and security audits to identify vulnerabilities related to privileged access.
• Develop and implement mitigation strategies to address identified risks and enhance overall security posture.
• Prepare detailed reports and presentations on risk assessment findings and recommendations.

Training

• Educate teams on the importance of privileged access management and security best practices.
• Develop and deliver training programs and workshops to enhance teams' understanding and capabilities in the PAM solution.
• Stay informed about the latest trends and developments in cybersecurity and PAM technologies.

Documentation

• Create and maintain comprehensive documentation for PAM solutions, including configuration guides, user manuals, and operational procedures.
• Ensure that all documentation is accurate, up-to-date, and easily accessible to teams.
• Develop and maintain detailed records of team engagements, including project plans, timelines, and deliverables.

Collaboration

• Work closely with other cybersecurity professionals to ensure a holistic approach to security.
• Participate in cross-functional teams to address complex security challenges and develop integrated solutions.

What qualifications you will need

• Bachelor's degree Information Systems Preferred
• Seven or more years of experience in Identity and Access or System Engineering
• PAM-specific Certifications Preferred
• CISSP Preferred
• Microsoft security-related certifications Preferred
• CISM Preferred

Knowledge, Skills, Abilities, Behaviors

• Privileged Access: Expert knowledge and understanding of privilege access management concepts, principles, and practices including those for on-prem and cloud environments; Required
• Privileged Access Solutions: Expertise configuring and managing PAM solutions, such as password vaults, session recording, and access control systems; automation via PowerShell, APIs, or other scripting languages. Required
• Cybersecurity: Advanced understanding of cybersecurity principles and risk management. Required
• Identity & Access Management concepts: advanced understanding of IAM concepts such as: user lifecycle management; access control standards and best practices; provisioning / de-provisioning; secrets management; access management; multi-factor authentication; single sign-on. Required
• DevOps: Knowledge of DevOps concepts such as CI/CD pipelines focused on security automation. Preferred
• Service and Quality Excellence: Ability to demonstrate an uncompromising commitment to delivering exceptional care to create an unmatched value proposition for our patients. Required
• Honor our Mission and Values: Ability to build trust and act with authenticity to cultivate a culture of integrity, inclusion, and mutual respect. Required
• Effective Decision Making: Ability to make timely, informed decisions that are in the best interest of our patients, employees, providers, community, and HCA. Required
• Lead and Develop Others: Ability to lead others to accomplish organizational goals and objectives; provide meaningful coaching and mentoring to increase the capabilities of individuals and teams and drive employee engagement. Required
• Communicate with Impact: Ability to deliver information in a clear, concise, and compelling manner to effectively engage others and achieve desired results. Required
• Achieve Success through Change: Ability to identify opportunities for improvement and innovation, remove barriers and resistance, and enable desired behaviors Required
• Drive Execution and Financial Results: Ability to commit to the success and financial wellbeing of HCA by challenging others to excel and hold themselves and others accountable for achieving results. Required

Benefits

• Comprehensive benefits for medical, prescription drug, dental, vision, behavioral health and telemedicine services
• Wellbeing support, including free counseling and referral services
• Time away from work programs for paid time off, paid family leave, long- and short-term disability coverage and leaves of absence
• Savings and retirement resources, including a 401(k) Plan with a 100% match on 3% to 9% of pay (based on years of service), Employee Stock Purchase Plan, flexible spending accounts, preferred banking partnerships, retirement readiness tools, rollover support and financial wellbeing counseling
• Education support through tuition assistance, student loan assistance, certification support, dependent scholarships and a partnership with Galen College of Nursing
• Additional benefits for fertility and family building, adoption assistance, life insurance, supplemental health protection plans, auto and home insurance, legal counseling, identity theft protection and consumer discounts

Learn More About Employee Benefits

Note: Eligibility for benefits may vary by location.

HCA Healthcare has been recognized as one of the World's Most Ethical Companies® by the Ethisphere Institute more than ten times. In recent years, HCA Healthcare spent an estimated $3.7 billion in cost for the delivery of charitable care, uninsured discounts, and other uncompensated expenses.

"There is so much good to do in the world and so many different ways to do it."- Dr. Thomas Frist, Sr.

HCA Healthcare Co-Founder

We are an equal opportunity employer. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.