Privileged Access Management (PAM) Engineer

MDAEdge; New York (NY); On-site; USD 140,000 - 190,000; Full time

Job summary

MDAEdge is seeking two on-site Privileged Access Management Engineers for New York, NY or Alpharetta, GA. You will design, implement, and support secure PAM solutions and integrate AI-driven automation into enterprise security platforms.

The role requires hands-on PAM platform experience (CyberArk, BeyondTrust, Delinea, One Identity), strong knowledge of least privilege and session management, and a background in secure software development for regulated environments.

Qualifications

• Bachelor’s degree in CS/IT/Engineering or equivalent.
• Hands-on PAM experience with CyberArk, BeyondTrust, Delinea, or One Identity.
• Strong knowledge of privileged access concepts and session management.
• Experience building AI, LLM, automation, or platform engineering solutions.
• Familiarity with prompt engineering, model evaluation, and governance.
• Secure SDLC and cloud-native architectures awareness.
• English fluent; on-site in NY or Alpharetta.

Responsibilities

• Design, implement, and maintain enterprise PAM solutions to ensure secure access.
• Build AI-enabled automation to enhance identity and security operations.
• Integrate AI solutions with existing identity, monitoring, and security platforms.
• Develop and manage secure access controls for privileged, service, and machine identities.
• Ensure AI-enabled solutions are secure, auditable, and compliant.
• Support AI governance, monitoring, and security best practices.
• Collaborate with cybersecurity, IAM, cloud, and audit teams to improve efficiency.

Skills

Privileged access management

AI automation

Cloud-native architectures

Secure SDLC

Regulated environments

Education

Bachelor's degree in Computer Science, Cybersecurity, Information Technology, Engineering, or equivalent

Tools

CyberArk

BeyondTrust

Delinea

One Identity

Job description

We are seeking two skilled Privileged Access Management (PAM) Engineers for direct-hire, on-site positions in New York, NY or Alpharetta, GA. The successful candidates will design, implement, and support secure privileged access solutions while integrating AI-driven automation into enterprise security platforms.
Key Responsibilities:

• Design, implement, and maintain enterprise PAM solutions to ensure secure access.
• Build secure, AI-enabled automation to enhance identity and security operations.
• Integrate AI solutions with existing enterprise identity, monitoring, and security platforms.
• Develop and manage secure access controls for privileged, service, and machine identities.
• Ensure all AI-enabled solutions are secure, explainable, auditable, and compliant with enterprise standards.
• Support AI governance, monitoring, and security best practices across the organization.
• Collaborate with cybersecurity, IAM, cloud, infrastructure, application, and audit teams to improve operational efficiency.

Required Qualifications:

• Bachelor's degree in Computer Science, Cybersecurity, Information Technology, Engineering, or equivalent professional experience.
• Hands-on experience with enterprise PAM platforms (e.g., CyberArk, BeyondTrust, Delinea, or One Identity).
• Strong knowledge of privileged access, service accounts, non-human identities, least privilege, RBAC, Just-in-Time (JIT) access, and session management.
• Experience implementing privileged access governance and security controls.
• Experience building or supporting AI, LLM, automation, or platform engineering solutions.
• Knowledge of prompt engineering, model evaluation, hallucination mitigation, drift monitoring, and grounding techniques.
• Experience with agent frameworks, orchestration, and multi-agent workflows.
• Strong understanding of secure software development, cloud-native architectures, APIs, distributed systems, and modern MLOps/LLMOps practices.
• Experience supporting production environments within regulated industries.
• Native or bilingual proficiency in English.
• Must be a resident of New York, NY or Alpharetta, GA, or be able to work on-site in these locations.

Desired Qualifications:

• Familiarity with AI governance frameworks (e.g., NIST AI RMF, OWASP Top 10 for LLM Applications, MITRE ATLAS, or ISO).
• Experience with hybrid cloud architecture and securing machine/non-human identities.
• Background in audit, compliance, and regulatory support within financial services or other highly regulated environments.
• Relevant certifications, such as CyberArk (Defender/Sentry), BeyondTrust, Delinea, One Identity, AWS/Azure Cloud, CISSP, Security+, or AI/ML-related credentials.