Privileged Access Management (PAM) Engineer

MedStar Health; Woodlawn (MD); Remote; USD 100,000 - 130,000; Full time

Job summary

MedStar Health is seeking a Privileged Access Management (PAM) Engineer to enhance security for critical systems. The role requires designing and maintaining PAM solutions, ensuring compliance with cybersecurity standards, and collaborating with various teams to enforce access management strategies. Candidates should have a bachelor's degree in Cybersecurity and at least five years of relevant experience. This fully remote position offers a competitive salary ranging from $100,000 to $130,000 alongside multiple benefits.

Qualifications

• 5+ years of experience managing access controls or identity management platforms.
• Hands-on experience with PAM solutions.
• Understanding of ARS 5.0, NIST 800-53, and Zero Trust principles.

Responsibilities

• Design, configure, and maintain PAM solutions for CMS systems.
• Collaborate with stakeholders on PAM strategy.
• Monitor PAM environments for access violations and threats.

Skills

Access Control Management

PAM Tools Experience

Troubleshooting

Education

Bachelor's degree in Cybersecurity or related field

Tools

CyberArk

BeyondTrust

Thycotic

HashiCorp Vault

Job description

Job Details

Windsor Mill, MD Fully Remote Full Time 4 Year Degree Job Location Remote Type Position Type Education Level

Description

About Us:At RELI Group, our work is grounded in purpose. We partner with government agencies to solve complex challenges, improve public health, strengthen national security, and make government services more effective and efficient. Our team of over 500 professionals brings deep expertise and a shared commitment to delivering meaningful outcomes. Behind every solution is a group of experts who care deeply about impact-whether we're supporting data-driven decisions, modernizing systems or safeguarding critical programs.

Positions Summary:

RELI Group is seeking a knowledgeable and security-focused Privileged Access Management (PAM) Engineer to support Task 8 of the Information Security and Privacy Services (ISPS) under the Marketplace System Security and Privacy Support Services (MSSPSS) contract. The PAM Engineer will be responsible for designing, implementing, and maintaining solutions that protect privileged access to critical ACA and NST systems. This role includes supporting compliance with CMS Acceptable Risk Safeguards (ARS 5.0), reducing attack surfaces, and strengthening authentication and access control strategies across the program's cybersecurity architecture.

Responsibilities:

• Design, configure, and maintain PAM solutions to control and monitor privileged access across CMS systems


• Work with CMS and internal stakeholders to align PAM strategy with ARS 5.0, Zero Trust Architecture, and enterprise access policies


• Integrate PAM tools with directory services, ticketing systems, SIEMs, and ITSM workflows


• Implement secure credential management, session recording, auditing, and least-privilege enforcement


• Monitor PAM environments for anomalies, access violations, and potential threats


• Document PAM policies, SOPs, and configurations in alignment with CMS guidelines and FISMA metrics


• Collaborate with ISSOs, Cybersecurity Leads, and Risk Strategists to ensure consistent PAM enforcement across all systems and user groups


• Support internal reviews, system audits, and ATO processes that involve privileged access controls

Qualifications

• Bachelor's degree in Cybersecurity, Information Systems, or a related technical field.


• 5+ years of experience managing access controls, PAM solutions, or identity management platforms.


• Hands-on experience with PAM tools (e.g., CyberArk, BeyondTrust, Thycotic, HashiCorp Vault).


• Understanding of ARS 5.0, NIST 800-53, and Zero Trust principles related to identity and access.


• Experience with RBAC, MFA, secure credential vaulting, and session auditing.


• Excellent troubleshooting and documentation skills.

Preferred Qualifications:

• Experience supporting CMS, CCIIO, or ACA-related environments


• Experience integrating PAM tools with Splunk, ServiceNow, or Active Directory


• Certifications such as CISSP, Security+, or vendor-specific credentials (e.g., CyberArk Defender)


• Familiarity with FedRAMP, FISMA, and NIST risk management frameworks


• Knowledge of privileged access governance and audit response processes

EEO Employer:

RELI Groupis an Equal Employment Opportunity / Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, color, national origin, ancestry, citizenship status, military status, protected veteran status, religion, creed, physical or mental disability, medical condition, marital status, sex, sexual orientation, gender, gender identity or expression, age, genetic information, or any other basis protected by law, ordinance, or regulation.

HUBZone:

We encourage all candidates who live in a HUBZone to apply. You can check to see if your address is located in a HUBZone by accessing theSBA HUBZone Map.

The annual salary range for this position is $100,000.00 to $130,000.00.Actual compensation will depend on a range of factors, including but not limited to the individual's skills, experience, qualifications, certifications, location, other business and organizational needs, and applicable employment laws. The estimate displayed represents the typical salary range for this position and is just one component of the total compensation package for employees. RELI Group provides a variety of additional benefits to its employees. For additional details on the benefits that RELI Group offers clickhere