Privileged Access Management (PAM) Engineer

MDAEdge; Alpharetta (GA); On-site; USD 120,000 - 160,000; Full time

Job summary

MDAEdge is seeking two skilled PAM Engineers for direct-hire, on-site roles in New York, NY or Alpharetta, GA. You will design, implement, and support secure privileged access solutions while integrating AI-driven automation into enterprise security platforms.

Responsibilities include building AI-enabled automation, integrating with IAM and security platforms, and ensuring governance, compliance, and secure access across privileged, service, and machine identities.

Qualifications

• Bachelor's degree in CS, cybersecurity, IT, engineering or equivalent experience.
• Hands-on with enterprise PAM platforms such as CyberArk, BeyondTrust, Delinea, One Identity.
• Strong knowledge of privileged access concepts: RBAC, JIT, non-human identities.
• Experience implementing PAM governance and security controls.
• Experience building AI, LLM, automation platforms.
• Knowledge of prompt engineering, model evaluation, drift monitoring, grounding.
• Experience with agent frameworks and multi-agent workflows.
• Understanding secure software development and cloud-native architectures.
• Experience in regulated industries and on-site English proficiency.
• Resident of NY, NY or Alpharetta, GA, or willing to work on-site.

Responsibilities

• Design, implement, and maintain enterprise PAM solutions to ensure secure access.
• Build secure, AI-enabled automation to enhance identity and security operations.
• Integrate AI solutions with existing enterprise identity, monitoring, and security platforms.
• Develop and manage secure access controls for privileged, service, and machine identities.
• Ensure AI-enabled solutions are secure, auditable, and compliant with enterprise standards.
• Support AI governance, monitoring, and security best practices across the organization.
• Collaborate with cybersecurity, IAM, cloud, infrastructure, application, and audit teams.

Skills

PAM

RBAC

JIT Access

Session Management

AI Governance

LLMOps

Automation

Cloud-native

Security Controls

Education

Bachelor's degree

Tools

CyberArk

BeyondTrust

Delinea

One Identity

Job description

We are seeking two skilled Privileged Access Management (PAM) Engineers for direct-hire, on-site positions in New York, NY or Alpharetta, GA. The successful candidates will design, implement, and support secure privileged access solutions while integrating AI-driven automation into enterprise security platforms.
Key Responsibilities:

• Design, implement, and maintain enterprise PAM solutions to ensure secure access.
• Build secure, AI-enabled automation to enhance identity and security operations.
• Integrate AI solutions with existing enterprise identity, monitoring, and security platforms.
• Develop and manage secure access controls for privileged, service, and machine identities.
• Ensure all AI-enabled solutions are secure, explainable, auditable, and compliant with enterprise standards.
• Support AI governance, monitoring, and security best practices across the organization.
• Collaborate with cybersecurity, IAM, cloud, infrastructure, application, and audit teams to improve operational efficiency.

Required Qualifications:

• Bachelor's degree in Computer Science, Cybersecurity, Information Technology, Engineering, or equivalent professional experience.
• Hands-on experience with enterprise PAM platforms (e.g., CyberArk, BeyondTrust, Delinea, or One Identity).
• Strong knowledge of privileged access, service accounts, non-human identities, least privilege, RBAC, Just-in-Time (JIT) access, and session management.
• Experience implementing privileged access governance and security controls.
• Experience building or supporting AI, LLM, automation, or platform engineering solutions.
• Knowledge of prompt engineering, model evaluation, hallucination mitigation, drift monitoring, and grounding techniques.
• Experience with agent frameworks, orchestration, and multi-agent workflows.
• Strong understanding of secure software development, cloud-native architectures, APIs, distributed systems, and modern MLOps/LLMOps practices.
• Experience supporting production environments within regulated industries.
• Native or bilingual proficiency in English.
• Must be a resident of New York, NY or Alpharetta, GA, or be able to work on-site in these locations.

Desired Qualifications:

• Familiarity with AI governance frameworks (e.g., NIST AI RMF, OWASP Top 10 for LLM Applications, MITRE ATLAS, or ISO).
• Experience with hybrid cloud architecture and securing machine/non-human identities.
• Background in audit, compliance, and regulatory support within financial services or other highly regulated environments.
• Relevant certifications, such as CyberArk (Defender/Sentry), BeyondTrust, Delinea, One Identity, AWS/Azure Cloud, CISSP, Security+, or AI/ML-related credentials.