PAM Engineer, StrongDM and Cloud Infrastructure

Solugenix; Irvine (CA); Hybrid; USD 110,000 - 117,000; Full time

Job summary

Solugenix is seeking a senior PAM Engineer to implement and support StrongDM across enterprise environments. The role focuses on secure access to infrastructure, databases, and cloud resources with strong PAM governance.

You will automate provisioning with Python/Bash/PowerShell, integrate with AWS, IAM, and SSO providers, and collaborate across IAM, Cloud Engineering, and Security Operations teams. Hybrid work in Irvine or San Antonio is offered.

Qualifications

• 12+ years of relevant engineering, infrastructure, or security experience.
• Hands-on experience administering and supporting StrongDM in an enterprise environment.
• Strong understanding of PAM concepts, including privileged access controls, least privilege, session auditing, and access governance.
• Practical experience with AWS services and cloud security, including IAM roles, policies, and permissions.
• Proficiency in Python, Bash, or PowerShell for automation and troubleshooting.
• Understanding of IAM, SSO, federation, authentication, and authorization.
• Experience troubleshooting secure connectivity to cloud infrastructure, databases, and other enterprise resources.
• Familiarity with Linux environments and networking fundamentals, including DNS, TLS/SSL, and TCP/IP.
• Experience with Git, CI/CD practices, and infrastructure automation.
• Strong analytical, troubleshooting, communication, and documentation skills.

Responsibilities

• Configure, administer, and support StrongDM access controls, gateways, resources, identities, roles, and access policies.
• Implement least-privilege access, privileged session controls, access approvals, and audit trails in alignment with enterprise security requirements.
• Integrate StrongDM with AWS environments and support secure access to cloud resources, databases, and infrastructure.
• Integrate StrongDM with enterprise identity providers and SSO solutions; support RBAC and user provisioning and deprovisioning.
• Develop automation using Python, Bash, or PowerShell to streamline access provisioning, configuration management, operational tasks, and reporting.
• Support repeatable configurations through Terraform and Git-based workflows.
• Review access logs, investigate access issues, support audit requirements, and help maintain compliance with security policies.
• Troubleshoot StrongDM connectivity, authentication, authorization, gateway, and resource-access issues.
• Maintain technical documentation, operational runbooks, and configuration standards.
• Collaborate with IAM, Cloud Engineering, Security Operations, and application teams.

Skills

PAM concepts

StrongDM

AWS security

IAM

SSO

Python

Bash

PowerShell

Git

CI/CD

Troubleshooting

Tools

Kubernetes

Terraform

Git

CI/CD

Job description

PAM Engineer, StrongDM and Cloud Infrastructure

Irvine, CA or San Antonio, TX (Hybrid)

12+ Month Contract

SGX20837

We are seeking a senior PAM Engineer with hands-on experience implementing, administering, and supporting StrongDM in an enterprise environment. The engineer will help provide secure, centralized, and auditable access to infrastructure, databases, cloud environments, and other critical resources.

The ideal candidate has a strong background in privileged access management, AWS security, identity and access management, and scripting automation. Experience with Kubernetes is a plus but is not required.

Qualifications

• 12+ years of relevant engineering, infrastructure, or security experience.
• Hands-on experience administering and supporting StrongDM in an enterprise environment.
• Strong understanding of PAM concepts, including privileged access controls, least privilege, session auditing, and access governance.
• Practical experience with AWS services and cloud security, including IAM roles, policies, and permissions.
• Proficiency in Python, Bash, or PowerShell for automation and troubleshooting.
• Understanding of IAM, SSO, federation, authentication, and authorization.
• Experience troubleshooting secure connectivity to cloud infrastructure, databases, and other enterprise resources.
• Familiarity with Linux environments and networking fundamentals, including DNS, TLS/SSL, and TCP/IP.
• Experience with Git, CI/CD practices, and infrastructure automation.
• Strong analytical, troubleshooting, communication, and documentation skills.

Preferred Qualifications

• Experience with Kubernetes, including secure access to clusters and namespaces, Kubernetes RBAC, and authentication and authorization mechanisms.
• Experience integrating StrongDM with identity providers such as Okta, Microsoft Entra ID, or other enterprise SSO platforms.
• Familiarity with Terraform and Infrastructure as Code.
• Experience with other PAM solutions, such as CyberArk, BeyondTrust, or Delinea.
• Experience supporting production environments, incident management, change management, and on-call operations.
• Relevant AWS, Kubernetes, cloud security, or IAM certifications.

Responsibilities

• Configure, administer, and support StrongDM access controls, gateways, resources, identities, roles, and access policies.
• Implement least-privilege access, privileged session controls, access approvals, and audit trails in alignment with enterprise security requirements.
• Integrate StrongDM with AWS environments and support secure access to cloud resources, databases, and infrastructure.
• Integrate StrongDM with enterprise identity providers and SSO solutions; support RBAC and user provisioning and deprovisioning.
• Develop automation using Python, Bash, or PowerShell to streamline access provisioning, configuration management, operational tasks, and reporting.
• Support repeatable configurations through Terraform and Git-based workflows.
• Review access logs, investigate access issues, support audit requirements, and help maintain compliance with security policies.
• Troubleshoot StrongDM connectivity, authentication, authorization, gateway, and resource-access issues.
• Maintain technical documentation, operational runbooks, and configuration standards.
• Collaborate with IAM, Cloud Engineering, Security Operations, and application teams.

Pay Range for CA, CO, IL, NJ, NY, WA, and DC: $80/hour to $85/hour. Starting rate of pay offered may vary depending on factors including but not limited to, position offered, location, education, training, and/or experience.

Solugenix will consider qualified applicants with a criminal history pursuant to the California Fair Chance Act and Ordinance. Applicants do not need to disclose their criminal history or participate in a background check until a conditional job offer is made to you. After making a conditional offer and running a background check, if we are concerned about conviction that is directly related to the job, applicants will be given the chance to explain the circumstances surrounding the conviction, provide mitigating evidence, or challenge the accuracy of the background report.

About Solugenix

Solugenix is a leader in IT services, delivering cutting-edge technology solutions, exceptional talent, and managed services to global enterprises. With extensive expertise in highly regulated and complex industries, we are a trusted partner for integrating advanced technologies with streamlined processes. Our solutions drive growth, foster innovation, and ensure compliance providing clients with reliability and a strong competitive edge.

Recognized as a 2024 Top Workplace, Solugenix is proud of its inclusive culture and unwavering commitment to excellence. Our recent expansion, with new offices in the Dominican Republic, Jakarta, and the Philippines, underscores our growing global presence and ability to offer world-class technology solutions. Partnering with Solugenix means more than just business it means having a dedicated ally focused on your success in today's fast-evolving digital world.