PAM Engineer: Privileged Access Management & IAM Security

Vastek Inc.; Texas; On-site; USD 120,000 - 180,000; Full time

Job summary

Vastek Inc. is seeking a Privileged Access Management & Operations professional to design, operate, and continually improve PAM across network devices, servers, cloud resources, Kubernetes, and admin platforms.

You will own onboarding, vaulting, rotation, session management, access reviews, recertification, and break-glass processes. You will implement least-privilege, RBAC, just-in-time access, and just-enough access; identify unmanaged accounts and shared credentials; provide operational

Qualifications

• Bachelor’s degree in computer science, Information Security, Engineering, or equivalent practical experience.
• 3-5 years of experience in security engineering, infrastructure security, identity security, PAM, or related disciplines.
• Strong hands-on experience implementing and operating enterprise PAM solutions in complex, large-scale production environments.
• Demonstrated ability to work across multiple engineering organizations and drive security initiatives through collaboration.

Responsibilities

• Design, operate, and continuously improve enterprise PAM capabilities across network devices, servers, cloud resources, Kubernetes, and administrative platforms.
• Own privileged account onboarding, credential vaulting and rotation, session management, access reviews, recertification, and break-glass processes.
• Implement least-privilege, RBAC, just-in-time, and just-enough access; identify unmanaged accounts, shared credentials, and excessive permissions.
• Provide operational ownership of PAM platforms, including health, upgrades, integrations, troubleshooting, monitoring, incident support, and recovery runbooks.

Skills

Security engineering

Cross-team collaboration

Education

Bachelor's degree

Tools

PAM platforms

Job description

Vastek Inc. is seeking a Privileged Access Management & Operations professional to design, operate, and continually improve PAM across network devices, servers, cloud resources, Kubernetes, and admin platforms.

You will own onboarding, vaulting, rotation, session management, access reviews, recertification, and break-glass processes. You will implement least-privilege, RBAC, just-in-time access, and just-enough access; identify unmanaged accounts and shared credentials; provide operational