Senior PAM Engineer — MSP Privileged Access Expert

AHEAD; United States; Remote; USD 150,000 - 170,000; Full time

Benefits offered by this job

Medical, Dental, and Vision Insurance

401(k)

Paid Holidays

Paid Time Off

Parental and caregiver leave

Job summary

AHEAD is searching for a Senior Privileged Access Management (PAM) Engineer to lead design, implementation, and operations of multi-tenant PAM for MSP customers, with a primary focus on BeyondTrust solutions.

The role requires deep PAM expertise, cross‑functional collaboration, and a strong scripting/automation background to deliver secure, scalable PAM services in a managed services environment.

Qualifications

• Bachelor’s degree in IS/CS/Cybersecurity or related field.
• 7+ years in IT operations, infrastructure, or cybersecurity with privileged access controls.
• 3+ years designing, implementing, and operating PAM solutions, BeyondTrust preferred.
• Experience delivering managed services in multi-tenant environments.
• Strong scripting and automation; consulting mindset.

Responsibilities

• Lead multi-tenant BeyondTrust PAM service architecture for MSP customers.
• Architect secure privileged access workflows for infrastructure, apps, databases, cloud, and network devices.
• Implement and maintain BeyondTrust Password Safe and related components (discovery, rotation, session brokering).
• Integrate PAM with identity platforms, MFA/SSO, SIEM, and ITSM tools.
• Develop automation with PowerShell and Python to manage privileged accounts at scale.

Skills

Communication skills

Leadership

Security best practices

Vendor management

Customer engagement

Education

Bachelor's degree in Information Systems, Computer Science, Cybersecurity, or related field

Tools

BeyondTrust Password Safe

BeyondTrust Privilege Management

PowerShell

Python

REST APIs

Active Directory / Entra ID / LDAP

SIEM

ServiceNow

Job description

AHEAD is searching for a Senior Privileged Access Management (PAM) Engineer to lead design, implementation, and operations of multi-tenant PAM for MSP customers, with a primary focus on BeyondTrust solutions.

The role requires deep PAM expertise, cross‑functional collaboration, and a strong scripting/automation background to deliver secure, scalable PAM services in a managed services environment.