Senior PAM Engineer

Dexian; Georgia; On-site; USD 140,000 - 190,000; Full time

Job summary

Dexian is seeking a Senior PAM Engineer to design, implement, integrate, and operate privileged access controls across large enterprise environments. The role emphasizes hands-on engineering, scripting, and onboarding privileged accounts across diverse systems, while aligning with identity governance and security policies.

The ideal candidate will have deep PAM deployment experience, production-grade credential vaulting and rotation, and strong scripting skills (Python/PowerShell).

Qualifications

• Hands-on experience with one or more leading PAM platforms.
• Production experience with credential vaulting, session management/recording, elevation and password rotation.
• Experience developing scripts, integrations, and onboarding automation for PAM.
• Experience using Python, Java, PowerShell, or similar languages and REST APIs.

Responsibilities

• Deploy and operate PAM capabilities in production across large environments.
• Develop scripts, connectors, and integrations.
• Automate onboarding, rotation, and reconciliation of privileged accounts.
• Integrate PAM with directory, ticketing, monitoring, and identity governance systems.
• Discover and onboard privileged accounts across systems and establish ownership and rotation policies.
• Test changes in non-production environments and apply change control and rollback plans.

Skills

Privileged access management

Python

PowerShell

REST APIs

Just-in-time access

Least-privilege

Multi-system engineering

Tools

Active Directory

Hybrid directory environments

Job description

Position Summary

The Senior PAM Engineer will design, implement, integrate, and operate privileged access controls at very large enterprise scale. This hands-on engineering role focuses on developing scripts and integrations, discovering and onboarding privileged accounts across multiple systems, implementing access controls, and thoroughly testing changes before production release.
The ideal candidate has deep implementation experience with a leading privileged access management platform and understands how privileged access connects to the broader identity pipeline. This role is suited to a multi-system engineer who can work across several platforms and manage multiple priorities on a small team.

Key Responsibilities

• Deploy and operate privileged access management capabilities in production, including:
  • Credential vaulting
  • Session management and recording
  • Privileged elevation and delegation
  • Password and key rotation
• Develop scripts, connectors, and integrations using languages such as Python, Java, PowerShell, or similar technologies, along with REST APIs.
• Automate account onboarding, credential rotation, reconciliation, and related privileged access processes.
• Integrate privileged access management with directory, ticketing, monitoring, and identity governance systems.
• Discover privileged, service, and shared accounts across multiple systems and bring them under consistent management.
• Establish clear account ownership, rotation policies, and reconciliation processes, including for accounts with incomplete or conflicting data.
• Test privileged access management changes in non-production environments before release.
• Apply change control and rollback plans to minimize operational disruption.
• Implement just-in-time and least-privilege access models, including time-bound elevation, approval workflows, break-glass procedures, and endpoint privilege management.
• Assess how access policy changes may affect the broader identity pipeline.
• Help secure service accounts, application credentials, automation secrets, and other non-human identities.
• Support consistent review and logging of privileged access across identity governance, directory, and monitoring environments.

Required Qualifications

• Hands-on implementation experience with one or more leading privileged access management platforms.
• Production experience with credential vaulting, session management and recording, privileged elevation and delegation, and password and key rotation.
• Experience developing scripts, integrations, custom connectors, and account onboarding automation for privileged access management.
• Experience using Python, Java, PowerShell, or similar programming languages, as well as REST APIs.
• Experience with privileged account discovery and onboarding across many systems.
• Experience managing account ownership, rotation policies, and reconciliation.
• Experience working in environments with 50,000 or more users and very large populations of service accounts and other non-human identities.
• Experience testing changes before production release and working with change control and rollback plans.
• Experience delivering just-in-time and least-privilege access models.
• Understanding of how privileged access management connects with identity governance, directory services, multifactor authentication, and conditional access.
• Working experience with Active Directory and hybrid directory environments.
• Experience working across multiple systems and platforms as a hands-on engineer.
• Ability to manage multiple tasks in a small-team environment.

Preferred Qualifications

• Experience securing service accounts, application credentials, and automation secrets.
• Awareness of how privileged access controls may apply to AI agents.
• Ability to learn quickly and apply strong engineering practices, even without extensive AI-specific experience.

Why This Opportunity May Be Appealing

• Build and operate privileged access controls at very large enterprise scale.
• Work across identity governance, directory services, monitoring, automation, and multiple systems.
• Help reduce standing administrative access through time-bound elevation, approval workflows, and endpoint controls.
• Drive the discovery, onboarding, ownership, and managed rotation of privileged accounts across priority environments.
• Apply disciplined testing, change control, and rollback practices to support reliable production releases.
• Help bring service accounts, application credentials, and automation secrets under controls consistent with human administrator access.
• Contribute to an integrated privileged access environment where access is consistently reviewed, governed, and logged.

Dexian stands at the forefront of Talent + Technology solutions with a presence spanning more than 70 locations worldwide and a team exceeding 10,000 professionals. As one of the largest technology and professional staffing companies and one of the largest minority-owned staffing companies in the United States, Dexian combines over 30 years of industry expertise with cutting-edge technologies to deliver comprehensive global services and support.
Dexian connects the right talent and the right technology with the right organizations to deliver trajectory-changing results that help everyone achieve their ambitions and goals.
To learn more, please visit https://dexian.com/.
Dexian is an Equal Opportunity Employer that recruits and hires qualified candidates without regard to race, religion, sex, sexual orientation, gender identity, age, national origin, ancestry, citizenship, disability, or veteran status.