PIM/ PAM ENGINEER

Capgemini Government Solutions; San Antonio (TX); On-site; USD 95,000 - 125,000; Full time

Benefits offered by this job

Paid time off

Medical/dental/vision insurance

401(k)

Job summary

Capgemini Government Solutions is seeking a PIM/PAM Engineer to support mission-critical government clients. You will architect, design, implement, and administer enterprise PIM/PAM, enforcing least privilege and secure vaulting across hybrid environments.

You will act as primary administrator for PAM vaulting, collaborating with Infrastructure, DevOps, and Security Operations teams to integrate vaulting across the tech stack, while ensuring compliance with federal security frameworks and DoD

Qualifications

• Bachelor's degree in computer science, IT, cybersecurity, or related field.
• 2-3+ years in IAM with focus on PIM/PAM engineering preferred.
• DoD Secret Clearance eligibility; U.S. citizenship required.

Responsibilities

• Design, deploy, configure, and maintain PIM/PAM solutions across enterprise, cloud, and hybrid environments.
• Manage privileged accounts lifecycle including vaulting, rotation, session management, and JIT access.
• Integrate PIM/PAM with IdPs, IGA, SIEM, and ticketing systems (e.g., ServiceNow) via APIs and scripting.
• Enforce least-privilege policies, RBAC, and ABAC.
• Perform regular discovery audits to centralize management of privileged accounts and secrets.
• Provide tier-3 support for identity infrastructure issues, upgrades, and DR drills.
• Support audit readiness and compliance reporting per federal/DoD frameworks.
• Demonstrate knowledge of session recording, credential vaulting, and delegation of authority.
• Strong Windows AD, Linux/Unix admin and GPOs knowledge.
• Proficiency in scripting (PowerShell, Python, Bash) for automation and integrations.

Skills

PIM/PAM engineering

Identity and Access Management

PowerShell

Python

Bash

Windows Active Directory

Linux/Unix administration

RBAC/ABAC

Education

Bachelor's degree in computer science / IT / cybersecurity

Tools

PAM vaulting tools

Job description

Capgemini Government Solutions (CGS) LLC is seeking a PIM/PAM Engineer to support missioncritical government clients. The ideal candidate will collaborate with a highperforming team, engage with a broad range of stakeholders, and play a key role in expanding CGS capabilities while continuing to grow their technical and consulting expertise.

The PIM/PAM Engineer is responsible for the architecture, design, implementation, and administration of enterprise-level Privileged Identity Management (PIM) and Privileged Access Management (PAM) solutions. This role ensures the secure management of privileged identities within the framework by maintaining a hardened appliance posture and enforcing the Principle of Least Privilege across the enterprise. The ideal candidate is a technical specialist who understands that identity is the new perimeter. You will act as the primary administrator for our PAM vaulting solutions, working closely with Infrastructure, DevOps, and Security Operations teams to integrate vaulting into every layer of our tech stack.

Key Responsibilities

• Design, deploy, configure, and maintain robust PIM/PAM solutions across enterprise, cloud, and hybrid environments.
• Manage the lifecycle of privileged accounts, including automated vaulting, password rotation, privileged session management, and just-in-time (JIT) access.
• Integrate PIM/PAM tools with broader identity ecosystems (IdPs, IGA, SIEM, and ticketing systems like ServiceNow) using APIs and custom scripting.
• Define, implement, and enforce least-privilege access policies, role-based access control (RBAC), and attribute-based access control (ABAC).
• Conduct regular discovery audits to identify unmanaged privileged accounts, service accounts, and secrets, bringing them under centralized management.
• Provide tier-3 technical support for complex identity infrastructure issues, system upgrades, patches, and disaster recovery drills.
• Support continuous monitoring and audit readiness by generating compliance reports and ensuring adherence to federal and DoD security frameworks.
• Deep understanding of session recording, credential vaulting, secrets management, and delegation of authority.
• Strong foundational knowledge of Windows Active Directory, Linux/Unix administration, Group Policy Objects (GPOs), and basic networking protocols.
• Proficiency in scripting languages (e.g., PowerShell, Python, Bash) for automation and API integrations.

Required Qualifications

• Ability to obtain and maintain a DoD Secret Clearance. U.S. Citizenship is required.
• Bachelor's degree in computer science, Information Technology, Cybersecurity, or a related technical field is required.
• 6+ of progressive IT experience required with 2-3+ years of dedicated experience in Identity and Access Management (IAM), with a strong focus on PIM/PAM engineering highly-desired.
• CompTIA Security+ CE (Current) is highly desired.

About Capgemini

Capgemini is a global leader in partnering with companies to transform and manage their business by harnessing the power of technology. The Group is guided everyday by its purpose of unleashing human energy through technology for an inclusive and sustainable future. It is a responsible and diverse organization of over 360,000 team members in more than 50 countries. With its strong 55-year heritage and deep industry expertise, Capgemini is trusted by its clients to address the entire breadth of their business needs, from strategy and design to operations, fueled by the fast evolving and innovative world of cloud, data, AI, connectivity, software, digital engineering and platforms. The Group reported in 2022 global revenues of 22 billion.

Disclaimer

All qualified applicants will be considered for employment based on their skills, and merit.

Please be aware that Capgemini may capture your image (video or screenshot) during the interview process and that image may be used for verification, including during the hiring and onboarding process.

Applicants for employment in the US must have valid work authorization that does not now and/or will not in the future require sponsorship of a visa for employment authorization in the US by Capgemini.

Capgemini discloses salary range information in compliance with state and local pay transparency obligations. The disclosed range represents the lowest to highest salary we, in good faith, believe we would pay for this role at the time of this posting, although we may ultimately pay more or less than the disclosed range, and the range may be modified in the future. The disclosed range takes into account the wide range of factors that are considered in making compensation decisions including, but not limited to, geographic location, relevant education, qualifications, certifications, experience, skills, seniority, performance, sales or revenue-based metrics, and business or organizational needs. At Capgemini, it is not typical for an individual to be hired at or near the top of the range for their role. The base salary range for the tagged location is $95k - $125k.

This role may be eligible for other compensation including variable compensation, bonus, or commission. Full time regular employees are eligible for paid time off, medical/dental/vision insurance, 401(k), and any other benefits to eligible employees.

Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities. This employer is required to notify all applicants of their rights pursuant to federal employment laws. For further information, please review the Know Your Rights notice from the Department of Labor.

Helping all candidates find great careers is our goal. The information you provide here is secure and confidential.