Senior PAM Engineer: Zero-Trust IAM & CyberArk

SMBC Group; Charlotte (NC); Hybrid; USD 120,000 - 180,000; Full time

Benefits offered by this job

Hybrid work model

Accommodations during candidacy

Job summary

SMBC Group is seeking an experienced IAM professional to lead Privileged Access Management initiatives across hybrid and cloud environments. You will design and deliver PAM solutions that support Zero Trust, Just-In-Time access, and least privilege controls, collaborating with security, infrastructure, cloud, and application teams.

The role emphasizes integrating CyberArk and Delinea platforms, architecting secure identity lifecycles, and ensuring compliance with audit requirements.

Qualifications

• 5+ years of IAM experience with a strong focus on PAM.
• Experience designing and implementing PAM solutions within complex enterprise environments.
• Experience implementing privileged access controls for human and non-human identities.
• Deep expertise with CyberArk PVWA, CPM, PSM, Conjur, and Secrets Manager.
• Strong experience with Delinea Secret Server or comparable PAM platforms.
• Knowledge of OAuth 2.0, OpenID Connect, and SAML.
• Experience with Microsoft Entra ID, Entra PIM, Azure RBAC, and privileged role governance.
• Strong scripting and automation skills to support PAM integrations and workflows.

Responsibilities

• Design, implement, and maintain enterprise PAM architecture with vaulting and JIT access.
• Lead deployment and optimization of CyberArk solutions (PVWA, CPM, PSM, Conjur).
• Integrate CyberArk, Delinea Secret Server, and other PAM platforms across environments.
• Develop CPM plugins and integrations for credential management.
• Build and support authentication and secrets management using CyberArk Conjur.
• Implement Microsoft Entra PIM for privileged role governance.
• Define least privilege models using RBAC/ABAC across cloud and on-premises.
• Automate PAM provisioning and onboarding with ServiceNow and SIEM tools.
• Monitor privileged activity and improve audit-ready reporting.
• Collaborate with IAM, Security, SOC, and Cloud teams; document standards and procedures.
• Evaluate emerging PAM tech and mentor team members.

Skills

Privileged Access Management

CyberArk

PAM architecture

RBAC/ABAC/JIT

Scripting/Automation

OAuth/OIDC/SAML

Azure/AWS/GCP IAM

Education

Bachelor's degree in CS/IT/Cybersecurity

Tools

Delinea Secret Server

CyberArk Conjur

ServiceNow integration

SIEM integration

Microsoft Entra PIM

Job description

SMBC Group is seeking an experienced IAM professional to lead Privileged Access Management initiatives across hybrid and cloud environments. You will design and deliver PAM solutions that support Zero Trust, Just-In-Time access, and least privilege controls, collaborating with security, infrastructure, cloud, and application teams.

The role emphasizes integrating CyberArk and Delinea platforms, architecting secure identity lifecycles, and ensuring compliance with audit requirements.