PAM Engineer - Identity Security & Automation

Verisign Inc.; Reston (VA); Hybrid; USD 136,000 - 184,000; Full time

Benefits offered by this job

Hybrid work schedule

Discretionary bonus

Stock awards

Job summary

Verisign is seeking an experienced Privileged Access Management (PAM) Engineer to design, implement, administer, and enhance enterprise PAM and identity security solutions. This hands-on role focuses on PAM engineering, Entra ID administration, automation, and integrations with IAM/IGA environments.

The ideal candidate will bring deep BeyondTrust PAM expertise, strong Entra ID skills, and a solid IAM foundation to collaborate with security, infrastructure, and architecture teams.

Qualifications

• Bachelor's degree in Computer Science, Engineering, Information Technology, Cybersecurity, or a related field, or equivalent experience
• 8+ years of experience in PAM, IAM, identity security, security engineering, or related technologies
• 2+ years of hands‑on experience implementing and administering enterprise PAM platforms in BeyondTrust
• Experience administering Microsoft Entra ID in an enterprise environment
• Experience with Entra ID capabilities including Conditional Access, RBAC, PIM, MFA, SSO, enterprise applications, and identity/access management
• Strong understanding of PAM concepts, including privileged account management, credential vaulting, password rotation, session management, least privilege, and privileged access controls
• Experience integrating PAM solutions with directories, applications, servers, cloud platforms, and other enterprise technologies
• Experience with scripting and automation using PowerShell, Python, REST APIs, or similar tools
• Strong understanding of authentication, authorization, identity lifecycle management, and security best practices
• Experience supporting audit and compliance requirements, including SOX controls, in high-tech environments

Responsibilities

• Design, implement, configure, administer, and maintain enterprise PAM solutions (BeyondTrust)
• Administer and enhance Microsoft Entra ID, including enterprise applications, authentication, Conditional Access, RBAC, PIM, MFA, and SSO
• Onboard applications, privileged accounts, service accounts, and other identities into PAM platforms
• Configure and maintain privileged account policies, credential management, password rotation, session management, and access controls
• Integrate PAM solutions with enterprise applications, directories, identity platforms, and infrastructure
• Engineer and support integrations across PAM, IAM, IGA, MFA, and SSO technologies
• Develop scripts and automation to streamline account onboarding, provisioning, testing, monitoring, and other identity-related processes
• Implement automated testing and validation to improve reliability and deployment efficiency
• Support privileged access reviews, access certifications, and remediation activities to meet security, audit, and compliance requirements
• Partner with security architects and engineering teams to develop technical designs and implement security controls based on least privilege and Zero Trust principles
• Evaluate new PAM and identity technologies and recommend improvements that strengthen security and operational efficiency
• Develop and maintain technical documentation, including system configurations, architecture diagrams, integration designs, operational procedures, and troubleshooting guides
• Participate throughout the solution lifecycle, including design, development, testing, deployment, production support, upgrades, and ongoing maintenance

Skills

PAM engineering

Microsoft Entra ID

Automation scripting

RBAC & PIM

Identity governance

BeyondTrust

SOX/compliance

REST/PowerShell

Education

Bachelor's degree in CS/IT or related field

Tools

BeyondTrust PAM

Microsoft Entra ID

Job description

Verisign is seeking an experienced Privileged Access Management (PAM) Engineer to design, implement, administer, and enhance enterprise PAM and identity security solutions. This hands-on role focuses on PAM engineering, Entra ID administration, automation, and integrations with IAM/IGA environments.

The ideal candidate will bring deep BeyondTrust PAM expertise, strong Entra ID skills, and a solid IAM foundation to collaborate with security, infrastructure, and architecture teams.