Lead Specialist, Privileged Access Management (PAM) Engineer

KPMG LLP; McLean (VA); On-site; USD 140,000 - 190,000; Full time

Job summary

KPMG LLP is seeking a Lead Specialist to join our Federal Advisory practice to lead the architecture, deployment, and management of Privileged Access Management (PAM) solutions for DoD application integration. You will drive alignment with broader IAM initiatives and oversee secure onboarding, risk assessments, and compliance activities.

You will mentor junior engineers, develop automation and connectors, and collaborate across teams to optimize CyberArk best practices while supporting ZT

Qualifications

• Bachelor's degree from an accredited college/university.
• Five+ years of experience engineering and managing PAM solutions with at least two years in a leadership role.
• Foundational knowledge of ICAM principals and federal frameworks (e.g., FICAM).
• Experience with large-scale PAM implementations and integration with enterprise systems (AD, SIEM, ITSM, IAM/IGA platforms).
• Possession or eligibility for U.S. Government clearance.

Responsibilities

• Lead the architecture, deployment, and management of PAM solutions for DoD integration into a ZT environment.
• Align PAM strategies with broader initiatives and integrate with IGA, SSO, MFA, and directory services.
• Oversee onboarding workflows for privileged accounts, perform risk assessments, and ensure compliance with DoD standards.
• Build automations to accelerate application integration into the PAM platform.
• Mentor junior PAM engineers and analysts; support project management and roadmap efforts.

Skills

Leadership

Security architecture

Risk assessment

Mentoring

Cross-functional collaboration

Education

Bachelor's degree

Tools

CyberArk

SailPoint

Okta

Active Directory

SIEM

Job description

KPMG is currently seeking a Lead Specialist to join our Federal Advisory practice.

Responsibilities:

• Lead the architecture, deployment, and management of CyberArk Privileged Access Management (PAM) solutions to support DoD application integration into ZT environment
• Drive alignment between PAM strategies and overarching initiatives, ensuring seamless integration with Identify Governance and Administration (IGA, Single Sign-On (SSO, Multi-Factor Authentication (AFA), and directory services
• Oversee workflows for onboarding privileged accounts, conduct comprehensive risk assessments, and maintain strict compliance with DoD and client security standards
• Identify and build automations to accelerate integration of applications into PAM platform
• Partner with cross-functional teams to enable ZT capability deployment, successfully optimizing CyberArk best practices
• Develop and maintain automation scripts, policies, and custom connectors required for enterprise scalability
• Troubleshoot and resolve technical issues, ensuring highly stable PAM operations and remediation of incidents
• Provide strategic leadership in the design and implementation of privileged access auditing, reporting, and alerting mechanisms
• Mentor and review work of junior PAM engineers, and analysts
• Support documentation and reporting efforts for project management, roadmap tracking and overall ZT maturation

Qualifications:

• A minimum of five years of experience engineering and managing privileged access management (PAM) solutions including two years in a leadership capacity; U.S. Federal government consulting experience preferred
• Bachelor's degree from an accredited college/university
• Foundational knowledge of comprehensive ICAM principals, architectures, and federal frameworks e.g. FICAM), extending beyond PAM to include end-to-end identify lifecycle management
• Understanding of privileged access management (PAM) concepts and DoD cybersecurity frameworks; CyberArk preferred
• Experience with large-scale PAM implementation, lifecycle management, and integration with enterprise systems (e.g. Active Directory, SIEM, ITSM, and IGA Platforms like SailPoint or Okta)
• Experience leading cross-functional teams in highly regulated environments
• Preferred certifications: CyberArk Defender, Sentry or Guardian; DoD 8570 IAM/IAT Level II or higher a plus
• Ability to travel as required to support firm engagements
• Applicant must possess or be eligible for a U.S. Government clearance