CyberArk PAM Engineer — Zero Trust DoD ICAM Expert

General Dynamics IT; Fort Meade (MD); On-site; USD 120,000 - 150,000; Full time

Job summary

General Dynamics IT is seeking an ICAM Privileged Access Management (PAM) Engineer to design, implement, and maintain enterprise privileged access capabilities supporting the DoD ICAM mission on site at Fort Meade.

The role emphasizes CyberArk PAM engineering, credential lifecycle governance, session monitoring, and Zero Trust-based access protections across distributed environments, with experience in Xage mesh security as a differentiator.

Qualifications

• 8+ years of related experience in Privileged Access Management.
• Strong CyberArk engineering experience with Vault, CPM, PSM, PVWA, and PTA.
• Experience with privileged user lifecycle management and credential rotation.
• Ability to design PAM integrations across Windows, Linux, cloud, and on-prem networks.
• DoD 8140 security certification (Security+ CE or higher) required.

Responsibilities

• Engineer, deploy, configure, and maintain CyberArk components.
• Integrate PAM controls with AD, LDAP, Windows/Linux, cloud, databases.
• Implement and support Xage mesh security for distributed PAM use cases.
• Develop onboarding, rotation policies, access rules, and session monitoring.
• Document architecture, SOPs, onboarding guides, and integration patterns.
• Support audit requirements and compliance reporting.

Skills

CyberArk PAM

PAM engineering

Credential onboarding

Education

Bachelor's degree

Tools

CyberArk Vault

CyberArk CPM

CyberArk PSM

PVWA

PTA

PowerShell

Python

Active Directory

Job description

General Dynamics IT is seeking an ICAM Privileged Access Management (PAM) Engineer to design, implement, and maintain enterprise privileged access capabilities supporting the DoD ICAM mission on site at Fort Meade.

The role emphasizes CyberArk PAM engineering, credential lifecycle governance, session monitoring, and Zero Trust-based access protections across distributed environments, with experience in Xage mesh security as a differentiator.