PAM Engineer

JCW Group; Charlotte (NC); On-site; USD 120,000 - 180,000; Full time

Job summary

JCW Group in the United States seeks a senior PAM engineer to lead design, deployment and evolution of privileged access in a large hybrid multi-cloud. You will own CyberArk and Entra ID PAM across PVWA/CPM/PSM/Conjur.

Work with security, infrastructure and cloud teams to define least privilege, automate PAM workflows and govern privileged identities for human and non-human actors across Azure, AWS, and GCP.

Qualifications

• 4-6 years in IAM with deep, hands-on CyberArk expertise.
• Strong experience with Microsoft Entra ID, Entra PIM, and Azure RBAC.
• Experience securing privileged access for both human and non-human identities across Azure, AWS, and GCP.
• Working knowledge of OAuth 2.0, OIDC, and SAML, and comfort scripting/automating PAM workflows.

Responsibilities

• Own the design, deployment, and ongoing enhancement of CyberArk and Entra ID Privileged Identity Management capabilities.
• Lead deployment, configuration, and enhancement of CyberArk across on-premises, cloud, and hybrid environments.
• Implement and manage Entra Privileged Identity Management (PIM) for governance, approvals, and lifecycle management.
• Develop custom CPM plugins and Conjur-based secrets management solutions for non-standard platforms.
• Define and enforce least privilege access models (RBAC, ABAC, JIT) across Azure, AWS, GCP, and on-premises.

Skills

PAM expertise

Zero Trust

Scripting

Tools

PVWA

CPM

PSM

Conjur

Entra ID

Azure RBAC

Job description

A globally recognized financial institution is looking to add a senior PAM engineer to its Identity and Access Management (IAM) Architecture and Engineering team. The organization is investing heavily in Zero Trust and privileged identity security across a large, hybrid, multi-cloud environment.

This is a hands-on engineering role for someone who wants deep ownership of the CyberArk and Microsoft Entra ID stack, working directly with security, infrastructure, and cloud teams to shape how privileged access is governed across the enterprise.

The Role

This person will own the design, deployment, and ongoing enhancement of the organization's CyberArk and Entra ID Privileged Identity Management capabilities.

Key responsibilities include:

• Lead deployment, configuration, and enhancement of CyberArk (PVWA, CPM, PSM, Conjur) across on-premises, cloud, and hybrid environments
• Implement and manage Microsoft Entra Privileged Identity Management (PIM) for privileged role governance, approvals, and lifecycle management
• Develop custom CPM plugins and Conjur-based secrets management solutions for non-standard platforms
• Define and enforce least privilege access models (RBAC, ABAC, JIT) across Azure, AWS, GCP, and on-premises platforms

What We're Looking For

• 4-6 years in Identity and Access Management with deep, hands-on CyberArk expertise (PVWA, CPM, PSM, Conjur)
• Strong experience with Microsoft Entra ID, Entra PIM, and Azure RBAC
• Experience securing privileged access for both human and non-human identities across Azure, AWS, and GCP
• Working knowledge of OAuth 2.0, OIDC, and SAML, and comfort scripting/automating PAM workflows