PAM Engineer

About the role

The PAM Engineer will support and enhance privileged access controls across enterprise Linux environments, focusing on securing privileged access, enforcing least-privilege principles, and supporting enterprise authentication and identity management initiatives.

Responsibilities

• Administer and support CyberArk Endpoint Privilege Manager (EPM) for Linux, including policy creation, privilege elevation controls, and endpoint security configurations.
• Manage the full SSH key lifecycle, including provisioning, rotation, auditing, governance, and key retirement.
• Implement and maintain privileged access controls and least-privilege security models across Linux environments.
• Collaborate with security, infrastructure, and identity management teams to support enterprise access management initiatives.
• Develop and maintain PAM-related standards, procedures, and operational best practices.
• Support Linux authentication and access management processes within enterprise environments.
• Perform security assessments and recommend improvements to strengthen privileged access controls.
• Automate administrative and operational tasks using Bash, Python, Ansible, or similar tools.
• Troubleshoot and resolve issues related to privileged access, authentication, and access control mechanisms.

Requirements

• Strong hands-on experience with CyberArk Endpoint Privilege Manager (EPM) for Linux.
• Experience managing SSH key lifecycle management, including key provisioning, rotation, governance, and auditing.
• Experience implementing and supporting Privileged Access Management (PAM) controls in enterprise environments.
• Strong Linux administration experience, preferably with RHEL, Rocky Linux, CentOS, Oracle Linux, or Ubuntu.
• Familiarity with PAM framework configuration, sudo policies, and Linux privilege management.
• Knowledge of Active Directory integrations, SSSD, LDAP, and Kerberos.
• Experience with automation tools such as Bash, Python, Ansible, or Puppet.
• Understanding of Linux hardening, security best practices, and access control frameworks.

Preferred Qualifications

• Experience with broader CyberArk PAM solutions.
• Experience supporting enterprise IAM and privileged access governance programs.
• Knowledge of Zero Trust and least-privilege security principles.
• Experience working in large-scale enterprise or regulated environments.

Benefits

Everforth Apex offers a comprehensive benefits package including medical, dental, vision, life, disability, and other insurance plans, an ESPP (employee stock purchase program), a 401K program with a company match, a Health Savings Account (HSA) on the HDHP plan, a SupportLinc Employee Assistance Program (EAP) with up to 8 free counseling sessions, a corporate discount savings program, and other discounts. Professional development includes an on-demand training program, access to certification prep and a library of technical and leadership courses/books/seminars, certification discounts, and perks to associations like CompTIA and IIBA. For additional resources, visit the Welcome Packet provided by Everforth Apex.

Pay

Details on pay are not specified in the job posting.

Schedule

Details on schedule are not specified in the job posting.

Skills

Not specified in the job posting.

Company Information

Everforth Apex is a world-class IT services company that serves thousands of clients across the globe. We value innovation, collaboration, and continuous learning. For more information about our commitment to excellence and our awards, visit our website. For career resources, training, certifications, and development opportunities, check out our benefits overview.

Equal Opportunity Employer

We do not discriminate or allow discrimination on the basis of race, color, religion, creed, sex (including pregnancy, childbirth, breastfeeding, or related medical conditions), age, sexual orientation, gender identity, national origin, ancestry, citizenship, genetic information, registered domestic partner status, marital status, disability, status as a crime victim, protected veteran status, political affiliation, union membership, or any other characteristic protected by law. Everforth Apex will consider qualified applicants with criminal histories in a manner consistent with the requirements of applicable law.