Privileged Access Management Engineer

JCW Group; Charlotte (NC); On-site; USD 180,000 - 240,000; Full time

Job summary

JCW Group seeks a VP-level Privileged Access Management Engineer (PAM) in Charlotte, NC, to lead hands-on engineering delivery within its IAM program. You will own the CyberArk environment end-to-end, design and operate privileged access controls, and collaborate on active build-out initiatives in a fast-growing, regulated financial services context.

You will report to PAM leadership and work in a small team, driving autonomy and ownership across multiple environments, with a focus on

Qualifications

• Strong hands-on CyberArk engineering experience is required.
• Solid experience with Microsoft Entra ID and Privileged Identity Management (PIM).
• Background in financial services or other highly regulated industries is preferred.
• Experience with enterprise-scale PAM across multiple environments.

Responsibilities

• Own CyberArk end-to-end design, build, and operational maturity of the PAM environment.
• Work with Entra ID/PIM to implement privileged access controls.
• Contribute to Delinea-related PAM initiatives as part of the toolset.
• Partner with a small, high-growth team on a global PAM mandate.
• Operate with autonomy on a live build-out, not legacy maintenance.

Skills

CyberArk engineering

Microsoft Entra ID / PIM

PAM engineering

Financial services experience

Contract / consulting experience

Tools

Delinea PAM

Job description

Privileged Access Management Engineer (PAM) VP | Charlotte, NC

A globally recognized, top-tier financial institution is expanding its US identity security function and is hiring a VP of Privileged Access Management Engineering to lead hands-on engineering delivery within its IAM organization.

This is a rare opportunity to join at the ground level of a genuine build-out: privileged access engineering has just transitioned into this team, and the successful candidate will take ownership of shaping the environment from here - not inherit a finished system.

About the Role

You’ll report directly to the leader of the PAM function and act as the primary hands-on engineer driving delivery - someone who can take direction, then build and operate independently with real ownership. PAM operates as a distinct, dedicated discipline within a fast-growing global Identity & Access Management organization.

What You’ll Do

• Own CyberArk engineering end-to-end - design, build, and operational maturity of the privileged access environment.
• Work extensively with Microsoft Entra ID, specifically Privileged Identity Management (PIM).
• Support and contribute to Delinea-related initiatives as part of the broader PAM toolset.
• Partner closely with a small, high-growth team on one of the organization's fastest-expanding global mandates.
• Operate with genuine autonomy on a live, active build-out rather than legacy maintenance.

What You’ll Bring

• Strong, hands-on CyberArk engineering experience (primary requirement).
• Solid experience with Microsoft Entra ID / Privileged Identity Management (PIM).
• Financial services background strongly preferred; candidates from other heavily regulated industries (e.g., healthcare) will also be considered.
• Enterprise-scale PAM experience; exposure across multiple environments is a plus.
• Open to candidates with varied career backgrounds, including contract and consulting experience.
• Based in or willing to relocate to Charlotte, NC.