Hybrid PAM Engineer: Zero Standing Privilege & JIT Access

Eliassen Group; Cary (NC); Hybrid; USD 117,000 - 143,000; Full time

Benefits offered by this job

Equity awards

Comprehensive benefits package

Bonus eligibility (10%)

Job summary

Eliassen Group in Cary, NC is seeking a Privileged Access Management Engineer to strengthen privileged access security across cloud, on‑premises, and hybrid environments. You will engineer and support PAM solutions, reduce privileged access risk, and help advance Just-In-Time access, least privilege, and Zero Standing Privilege across the enterprise.

This full‑time opportunity offers a salary up to $130K plus 10% bonus and yearly equity awards, with a comprehensive benefits package.

Qualifications

• 3+ years in PAM/IAM within large enterprise environments.
• 2+ years administering CyberArk, BeyondTrust, Delinea (CyberArk not required).

Responsibilities

• Design, implement, and support enterprise PAM across cloud, on‑prem, and hybrid.
• Engineer privileged access capabilities including vaulting, rotation, session management, and lifecycle.
• Support ZSP, JIT, least privilege, RBAC, and access reduction initiatives.
• Secure privileged and non‑human identities and on‑board systems to PAM platforms.
• Collaborate with infrastructure, cloud, app, and platform teams for onboarding.
• Support Microsoft Entra ID capabilities including PIM, MFA, and Conditional Access.
• Develop runbooks and procedures; automate access processes via PowerShell, Python, REST APIs.
• Troubleshoot PAM issues, perform root-cause analyses, and remediate.

Skills

PAM/IAM

Credential vaulting

Password rotation

Just-In-Time access

Zero Standing Privilege

RBAC

PowerShell

Python

REST APIs

Active Directory

Education

Bachelor's degree in Cybersecurity/IT/CS/Engineering

Tools

CyberArk

BeyondTrust

Delinea

Job description

Eliassen Group in Cary, NC is seeking a Privileged Access Management Engineer to strengthen privileged access security across cloud, on‑premises, and hybrid environments. You will engineer and support PAM solutions, reduce privileged access risk, and help advance Just-In-Time access, least privilege, and Zero Standing Privilege across the enterprise.

This full‑time opportunity offers a salary up to $130K plus 10% bonus and yearly equity awards, with a comprehensive benefits package.