Privileged Access Security Engineer (PAM)

IZAR Associates, Inc.; United States; On-site; USD 100,000 - 130,000; Full time

Job summary

A cybersecurity firm in the United States is seeking an experienced Information Technology Security Engineer to enhance privileged access management and endpoint controls. The ideal candidate will have over 7 years of experience in IAM/PAM, familiarity with cloud platforms, and strong skills in documentation and communication. This role emphasizes reducing attack surfaces and improving identity hygiene through detailed processes and compliance solutions.

Qualifications

• 7+ years of experience in PAM, IAM, or related security engineering roles.
• Hands-on experience with AD, Entra ID, Linux, and at least one major cloud platform (Azure, AWS, or GCP).
• Strong knowledge of vaulting technologies and endpoint privilege management practices.
• Proficiency with authentication methods: MFA, SSO, passwordless, Kerberos, and certificate-based access.
• Excellent documentation and communication abilities.

Responsibilities

• Administer and enhance the corporate vaulting platform to manage privileged credentials.
• Implement and maintain endpoint least-privilege policies across multiple environments.
• Lead local administrator cleanup projects and enforce removal of unauthorized admin rights.
• Contribute to enterprise Zero Trust architecture initiatives.
• Create and maintain technical runbooks and operational procedures.

Skills

Privileged Access Management

Identity and Access Management

Security Engineering

Documentation Skills

Zero Trust Principles

Education

7+ years in security roles

Tools

Active Directory

Entra ID

AWS

Azure

GCP

Job description

A cybersecurity firm in the United States is seeking an experienced Information Technology Security Engineer to enhance privileged access management and endpoint controls. The ideal candidate will have over 7 years of experience in IAM/PAM, familiarity with cloud platforms, and strong skills in documentation and communication. This role emphasizes reducing attack surfaces and improving identity hygiene through detailed processes and compliance solutions.