PAM Engineer

Job Title: PAM Engineer
Job Location: Reston, VA (Hybrid)
Compensation: $135,800 to $183,800 base plus bonus and equity

A mission driven technology organization focused on internet infrastructure and identity security is hiring a hands-on Privileged Access Management engineer. They are looking for someone who can own PAM engineering work end to end, partner closely with security and infrastructure teams, and improve privileged access controls through strong design, automation, and operational rigor.

What You’ll Do

• Design, implement, and administer an enterprise privileged access management platform with a focus on BeyondTrust

• Administer Microsoft Entra ID including enterprise apps, MFA, SSO, Conditional Access, RBAC, and PIM

• Onboard applications, privileged and service accounts into PAM with appropriate policies and controls

• Build automation for provisioning, onboarding, monitoring, and validation using tools such as PowerShell, Python, and APIs

• Support access reviews and compliance requirements through documentation, controls testing, and remediation support

What You Bring

• 8 plus years in PAM, IAM, identity security, or security engineering roles

• 2 plus years of hands on BeyondTrust PAM implementation and administration experience

• Strong Microsoft Entra ID experience across Conditional Access, PIM, MFA, SSO, and enterprise applications

• Practical scripting and automation skills using PowerShell and or Python plus REST APIs

• Solid understanding of least privilege, credential vaulting, password rotation, session management, and audit readiness

Why This Role?

You will have real ownership of a critical identity security program in a hybrid environment, with the opportunity to improve automation and raise the bar on privileged access controls across the enterprise.