Privileged Access Engineer – PAM & IAM Automation

HUB International; Chicago (IL); On-site; USD 100,000 - 120,000; Full time

Benefits offered by this job

Comprehensive benefits package

Job summary

HUB International is seeking a Security Identity PAM Engineer to implement and mature HUB's privileged access management platforms. You will focus on automation, integration, and customization of identity services across the organization.

The role requires deep IAM knowledge and hands-on experience with Delinea Secret Server, Admin by Request, Keeper, and SailPoint ISC integrations, with a Chicago reporting line. Travel up to 10% may be needed.

Qualifications

• Bachelor's degree in technology or applicable experience.
• 3+ years in Identity and Access Management roles.
• 5+ years with cloud infrastructure (AWS, GCP, Azure) and O365.
• Experience with SAML, OID, OAuth, SCIM, MFA.
• Experience with Active Directory / MS Entra ID.
• Experience with PowerShell, Python, shell scripting, XML, JSON, REST/SOAP.
• Working knowledge of Active Directory, MS Entra ID, and Okta.
• Knowledge of information security identity standards and regulatory requirements.
• 3+ years with Delinea/Thycotic Secret Server including vaulting and rotation.
• Experience with Admin by Request for endpoint privilege management.
• Experience with Keeper for secrets vaulting and access provisioning.
• Just-in-time privileged access provisioning and least-privilege enforcement.

Responsibilities

• Implement, maintain, and develop HUB's Privileged Access Management platforms.
• Automate, integrate, and customize identity services.
• Provide 24/7 incident response for security events.
• Ensure PAM tooling is operational and highly available.
• Contribute to identity operations KPIs and reporting.
• Maintain knowledge of IAM standards, governance, and best practices.
• Collaborate with teams on security operations, project status, and outcomes.
• Lead and assist in planning and executing projects with technical leadership.
• Contribute to security requirements, standards, and reference architectures.
• Integrate PAM platforms with SailPoint ISC and ITSM systems.

Skills

IAM concepts

SAML/OIDC/OAuth/SCIM

Active Directory / MS Entra ID

PowerShell/Python/Shell/XML/JSON/REST

Privileged access concepts

Just-in-time access

Education

Bachelor's degree

Tools

Delinea/Secret Server

Admin by Request

Keeper Secrets Manager

SailPoint ISC

Okta

Job description

HUB International is seeking a Security Identity PAM Engineer to implement and mature HUB's privileged access management platforms. You will focus on automation, integration, and customization of identity services across the organization.

The role requires deep IAM knowledge and hands-on experience with Delinea Secret Server, Admin by Request, Keeper, and SailPoint ISC integrations, with a Chicago reporting line. Travel up to 10% may be needed.