Senior Privileged Access Architect

Dexian; Georgia; On-site; USD 140,000 - 190,000; Full time

Job summary

Dexian is seeking a Senior PAM Engineer to design, implement, integrate, and operate privileged access controls across large enterprise environments. The role emphasizes hands-on engineering, scripting, and onboarding privileged accounts across diverse systems, while aligning with identity governance and security policies.

The ideal candidate will have deep PAM deployment experience, production-grade credential vaulting and rotation, and strong scripting skills (Python/PowerShell).

Qualifications

• Hands-on experience with one or more leading PAM platforms.
• Production experience with credential vaulting, session management/recording, elevation and password rotation.
• Experience developing scripts, integrations, and onboarding automation for PAM.
• Experience using Python, Java, PowerShell, or similar languages and REST APIs.

Responsibilities

• Deploy and operate PAM capabilities in production across large environments.
• Develop scripts, connectors, and integrations.
• Automate onboarding, rotation, and reconciliation of privileged accounts.
• Integrate PAM with directory, ticketing, monitoring, and identity governance systems.
• Discover and onboard privileged accounts across systems and establish ownership and rotation policies.
• Test changes in non-production environments and apply change control and rollback plans.

Skills

Privileged access management

Python

PowerShell

REST APIs

Just-in-time access

Least-privilege

Multi-system engineering

Tools

Active Directory

Hybrid directory environments

Job description

Dexian is seeking a Senior PAM Engineer to design, implement, integrate, and operate privileged access controls across large enterprise environments. The role emphasizes hands-on engineering, scripting, and onboarding privileged accounts across diverse systems, while aligning with identity governance and security policies.

The ideal candidate will have deep PAM deployment experience, production-grade credential vaulting and rotation, and strong scripting skills (Python/PowerShell).