Senior Associate, Privileged Access Management Delivery Engineer
KPMG US · Short Hills, NJ · 1 mo ago
HybridConsulting$96k/yrFull-time
Responsibilities
- Support the delivery, configuration, and operationalization of Privileged Access Management (PAM) solutions as part of enterprise Identity & Access Management (IAM) programs
- Implement and maintain PAM capabilities including privileged credential management, session management, just-in-time access, and endpoint management (EPM)
- Implement automated integration across adjacent security solutions (for example: Crowdstrike, SIEM solutions, ServiceNow)
- Automate PAM tasks using scripting and APIs (such as PowerShell, Python, REST, and others) and integrate with enterprise platforms (that is, Active Directory, IdPs, ITSM platforms, SIEM platforms, and more)
- Integrate PAM solutions across cloud environments (for example: Azure, AWS, GCP) while following security leading practices
- Execute privileged access onboarding activities, access workflow configurations, and break glass process enablement
- Perform risk assessments, evaluate privileged access controls, and support remediation activities across client environments
- Collaborate with cross-functional engineering, security, and risk teams to enhance PAM processes and resolve technical issues; support migrations from legacy or alternative PAM tooling; contribute to standardization of PAM delivery patterns and templates
Qualifications
- Minimum three years of recent professional experience in Identity & Access Management, Privileged Access Management, or cybersecurity
- Bachelor's degree from an accredited college or university is required; CyberArk Certified Delivery Engineer (CDE) or CyberArk Endpoint Privilege Manager (EPM) Certification preferred
- Hands on experience with Privileged Access Management delivery and engineering, with specific experience using CyberArk On-Prem and SaaS solutions; additional experience with secrets management platforms (that is, Conjur, HashiCorp) and other PAM platforms (such as Delinea, BeyondTrust) preferred
- Familiarity with infrastructure administration (such as Windows, Linux, Databases), networking basics, and IT architecture principles preferred
- Experience supporting PAM integrations within cloud platforms such as Azure, AWS, or GCP; proficiency with scripting, automation integrations, infrastructure-as-code, and configuration management
- Strong understanding of IAM concepts, privileged access controls, and associated security risks; strong problem solving, communication, and documentation skills with the ability to work collaboratively across teams
- Ability to travel as required