Senior PAM Engineer: CyberArk & Entra PIM Expert

JCW Group; Charlotte (NC); On-site; USD 120,000 - 180,000; Full time

Job summary

JCW Group in the United States seeks a senior PAM engineer to lead design, deployment and evolution of privileged access in a large hybrid multi-cloud. You will own CyberArk and Entra ID PAM across PVWA/CPM/PSM/Conjur.

Work with security, infrastructure and cloud teams to define least privilege, automate PAM workflows and govern privileged identities for human and non-human actors across Azure, AWS, and GCP.

Qualifications

• 4-6 years in IAM with deep, hands-on CyberArk expertise.
• Strong experience with Microsoft Entra ID, Entra PIM, and Azure RBAC.
• Experience securing privileged access for both human and non-human identities across Azure, AWS, and GCP.
• Working knowledge of OAuth 2.0, OIDC, and SAML, and comfort scripting/automating PAM workflows.

Responsibilities

• Own the design, deployment, and ongoing enhancement of CyberArk and Entra ID Privileged Identity Management capabilities.
• Lead deployment, configuration, and enhancement of CyberArk across on-premises, cloud, and hybrid environments.
• Implement and manage Entra Privileged Identity Management (PIM) for governance, approvals, and lifecycle management.
• Develop custom CPM plugins and Conjur-based secrets management solutions for non-standard platforms.
• Define and enforce least privilege access models (RBAC, ABAC, JIT) across Azure, AWS, GCP, and on-premises.

Skills

PAM expertise

Zero Trust

Scripting

Tools

PVWA

CPM

PSM

Conjur

Entra ID

Azure RBAC

Job description

JCW Group in the United States seeks a senior PAM engineer to lead design, deployment and evolution of privileged access in a large hybrid multi-cloud. You will own CyberArk and Entra ID PAM across PVWA/CPM/PSM/Conjur.

Work with security, infrastructure and cloud teams to define least privilege, automate PAM workflows and govern privileged identities for human and non-human actors across Azure, AWS, and GCP.