PAM Security Engineer – Privileged Access & IAM

University of Texas Southwestern Medical Center; Dallas (TX); Hybrid; USD 120,000 - 160,000; Full time

Benefits offered by this job

Healthcare benefits

Paid time off

On-site childcare

Retirement programs

Tuition reimbursement

Parental leave

Wellness programs

Job summary

UT Southwestern Medical Center in Dallas seeks an engineer to design, implement, and maintain privileged access security controls across on-premises and cloud environments. The role focuses on PAM deployment to protect high-risk accounts, integrate with identity platforms, and enforce least-privilege principles.

You'll onboard privileged accounts, automate credential rotation, and monitor sessions, collaborating with Information Security, Infrastructure, and Applications teams to align with

Qualifications

• Bachelor's Degree in computer science, math, information systems or related field.
• 5 years of experience in OS and systems administration with PAM/IGA tools.
• Experience with project management phases/methodologies.

Responsibilities

• Deploy and maintain PAM platforms (CyberArk, BeyondTrust, Microsoft Entra ID PIM).
• Integrate PAM with Active Directory, MFA (Duo), and cloud services.
• Onboard privileged accounts, automate credential rotation, and manage sessions.
• Define PAM policies, standards, and operational runbooks.
• Monitor KPIs and provide audit evidence for HIPAA/NIST compliance.
• Support incident response for privileged account misuse or compromise.
• Develop documentation related to projects, testing, disaster recovery and routine system administration processes.
• Performs other duties as assigned.

Skills

Privileged access management

IAM integration

System administration

Project management

Education

Bachelor's Degree in CS or related field

Tools

CyberArk

BeyondTrust

Microsoft Entra ID PIM

Job description

UT Southwestern Medical Center in Dallas seeks an engineer to design, implement, and maintain privileged access security controls across on-premises and cloud environments. The role focuses on PAM deployment to protect high-risk accounts, integrate with identity platforms, and enforce least-privilege principles.

You'll onboard privileged accounts, automate credential rotation, and monitor sessions, collaborating with Information Security, Infrastructure, and Applications teams to align with