Strong knowledge of privileged access, service accounts, non-human identities, least privilege, RBAC, Just-in-Time (JIT) access, and session management. The successful candidates will design, implement, and support secure privileged access solutions while integrating AI-driven automation into enterprise security platforms.
Numbers & Facts
Location
New York, NY
Salary
$84,224–$102,272 Per Year
Description
We are seeking two skilled Privileged Access Management (PAM) Engineers for direct-hire, on-site positions in New York, NY or Alpharetta, GA. The successful candidates will design, implement, and support secure privileged access solutions while integrating AI-driven automation into enterprise security platforms. Key Responsibilities:
Design, implement, and maintain enterprise PAM solutions to ensure secure access.
Build secure, AI-enabled automation to enhance identity and security operations.
Integrate AI solutions with existing enterprise identity, monitoring, and security platforms.
Develop and manage secure access controls for privileged, service, and machine identities.
Ensure all AI-enabled solutions are secure, explainable, auditable, and compliant with enterprise standards.
Support AI governance, monitoring, and security best practices across the organization.
Collaborate with cybersecurity, IAM, cloud, infrastructure, application, and audit teams to improve operational efficiency.
Required Qualifications:
Bachelor's degree in Computer Science, Cybersecurity, Information Technology, Engineering, or equivalent professional experience.
Hands-on experience with enterprise PAM platforms (e.g., CyberArk, BeyondTrust, Delinea, or One Identity).
Strong knowledge of privileged access, service accounts, non-human identities, least privilege, RBAC, Just-in-Time (JIT) access, and session management.
Experience implementing privileged access governance and security controls.
Experience building or supporting AI, LLM, automation, or platform engineering solutions.
Knowledge of prompt engineering, model evaluation, hallucination mitigation, drift monitoring, and grounding techniques.
Experience with agent frameworks, orchestration, and multi-agent workflows.
Strong understanding of secure software development, cloud-native architectures, APIs, distributed systems, and modern MLOps/LLMOps practices.
Experience supporting production environments within regulated industries.
Native or bilingual proficiency in English.
Must be a resident of New York, NY or Alpharetta, GA, or be able to work on-site in these locations.
Desired Qualifications:
Familiarity with AI governance frameworks (e.g., NIST AI RMF, OWASP Top 10 for LLM Applications, MITRE ATLAS, or ISO).
Experience with hybrid cloud architecture and securing machine/non-human identities.
Background in audit, compliance, and regulatory support within financial services or other highly regulated environments.
Relevant certifications, such as CyberArk (Defender/Sentry), BeyondTrust, Delinea, One Identity, AWS/Azure Cloud, CISSP, Security+, or AI/ML-related credentials.