PAM Systems Engineer - Hybrid (On-prem & Cloud)

The University of Texas Southwestern Medical Center; Dallas (TX); Hybrid; USD 110,000 - 160,000; Full time

Benefits offered by this job

PPO medical plan (day one)

Paid time off (day one)

TRS retirement programs

Paid parental leave

Wellness programs

Tuition reimbursement

PSLF eligible employer

Education assistance

Job summary

UT Southwestern Medical Center seeks an experienced Privileged Access Management System Engineer to design, implement, and maintain PAM controls across on‑premises and cloud environments. You will ensure least-privilege, onboard privileged accounts, automate rotations, and monitor sessions in collaboration with security, infrastructure, and IAM teams.

The role supports HIPAA/NIST compliance, with a hybrid work schedule and on-site facility in Dallas, TX.

Qualifications

• 5 years of experience in operating systems and systems administration, including experience with IGA or PAM tools.
• Experience with project management phases and methodologies.
• An equivalent combination of education and/or related experience may be substituted.

Responsibilities

• Deploy and maintain PAM platforms (CyberArk, BeyondTrust, Microsoft Entra ID PIM).
• Integrate PAM with Active Directory, MFA (Duo), and cloud services.
• Onboard privileged accounts, automate credential rotation, and manage sessions.
• Define PAM policies, standards, and runbooks.
• Monitor KPIs and provide audit evidence for HIPAA/NIST compliance.
• Support incident response for privileged account misuse or compromise.
• Develop documentation for projects, testing, DR, and admin processes.
• Perform other duties as assigned.

Skills

PAM security experience

Project management

IAM concepts

Education

Bachelor's Degree in CS/Info Systems/Math

Tools

CyberArk

BeyondTrust

Microsoft Entra ID PIM

Active Directory

Duo MFA

Job description

UT Southwestern Medical Center seeks an experienced Privileged Access Management System Engineer to design, implement, and maintain PAM controls across on‑premises and cloud environments. You will ensure least-privilege, onboard privileged accounts, automate rotations, and monitor sessions in collaboration with security, infrastructure, and IAM teams.

The role supports HIPAA/NIST compliance, with a hybrid work schedule and on-site facility in Dallas, TX.