Senior PAM Engineer: Privilege Access Modernization

474 MS Services Group, Inc.; Boston (MA); On-site; USD 135,000 - 195,000; Full time

Job summary

Morgan Stanley is seeking a Lead PAM Engineer in the Cyber Data Risk & Resilience division to design, implement, and operate enterprise authentication and Privilege Access Management solutions across cloud and on-prem environments. The role emphasizes hands-on engineering, integration with IDIRA CyberArk suites, and scalable security controls.

The position requires 12+ years in cyber security engineering, deep authentication expertise, and experience with infrastructure as code and automation.

Qualifications

• Requires 12+ years in cyber security engineering with hands-on principal engineering experience.
• Deep authentication expertise: OIDC/OAuth2, SAML, SSO, FIDO2/WebAuthn, PKI, API auth.
• Experience deploying PAM/Pcloud/Endpoint Privilege Management to cloud and hybrid environments.
• Experience with Privilege Access platforms and integration (CyberArk, Vault, IDM/LDAP).

Responsibilities

• Lead Hands-On PAM Engineering: design, build, integrate, and deploy secure Privilege Access Management solutions.
• Own Enterprise PAM products and integrate with authentication & federation protocols.
• Operate large-scale PAM estates with HA/DR, CI/CD, IaC, and observability.
• Define policies for endpoint privilege management and secrets management.
• Translate architecture into epics, stories, runbooks and documentation.

Skills

Cyber security engineering

IAM/PAM engineering

Kubernetes

Terraform

PowerShell/Python

OIDC/OAuth2/SAML

Unix/Linux authentication

Policy as code

Tools

CyberArk IDIRA suite

HashiCorp Vault

Entra ID

SailPoint

Ping Identity

Job description

Morgan Stanley is seeking a Lead PAM Engineer in the Cyber Data Risk & Resilience division to design, implement, and operate enterprise authentication and Privilege Access Management solutions across cloud and on-prem environments. The role emphasizes hands-on engineering, integration with IDIRA CyberArk suites, and scalable security controls.

The position requires 12+ years in cyber security engineering, deep authentication expertise, and experience with infrastructure as code and automation.