Lead Privileged Access Management (PAM) Engineer

Hybrid 2 Days Onsite/3 Days Remote in Washington, DC

Our client seeks a Lead Privileged Access Management (PAM) Engineer to design, implement, and operate enterprise PAM solutions across a complex federal hybrid cloud environment. The role manages privileged identities, enforces access controls, and ensures secure access across cloud and on-prem systems. The position requires deep hands-on experience with CyberArk and modern identity platforms, with the ability to integrate PAM into enterprise security architecture and support Zero Trust initiatives.

Due to client requirements, applicants must be willing and able to work on a w2 basis. For our w2 consultants, we offer a great benefits package that includes Medical, Dental, and Vision benefits, 401k with company matching, and life insurance.

Rate: $85.00 to $96.00/hr. w2

• Lead design, implementation, and administration of PAM solutions, primarily CyberArk.
• Manage and optimize privileged account lifecycle management, including onboarding, rotation, monitoring, and deprovisioning.
• Configure and support Microsoft Entra PIM for role-based privileged access.
• Integrate PAM solutions with identity providers and SSO platforms such as Okta and Entra ID.
• Develop and enforce policies for privileged access across enterprise systems.
• Coordinate with cybersecurity, infrastructure, and cloud teams to secure privileged access pathways.
• Support PAM strategy and architecture planning across hybrid environments.
• Implement automation and workflows for privileged access provisioning and approvals.
• Perform monitoring, auditing, and reporting on privileged access activity.
• Support compliance with federal security standards and cybersecurity frameworks.
• Provide technical leadership, mentoring, and guidance to junior engineers and administrators.

• 7+ years of experience in identity, access management, or cybersecurity engineering.
• 3+ years specializing in Privileged Access Management.
• Hands-on experience with CyberArk implementation or administration, Microsoft Entra PIM, and Okta or identity/access management integration.
• Expertise in privileged account lifecycle management and PAM architecture across cloud and on-prem environments.
• Experience integrating PAM with enterprise systems and security tools.
• Strong understanding of IAM, RBAC, and privileged access controls.
• Experience supporting enterprise or federal IT environments.
• Exposure to tools and platforms including AWS, Azure, Microsoft Defender, Microsoft Sentinel, Rapid7 InsightVM, Veracode, Jira, Confluence, Device42, Xacta, Intune, Microsoft Purview, Appian, and Oracle.
• Preferred: Experience with federal agencies or regulated environments (FISMA, NIST), familiarity with Zero Trust, scripting with PowerShell or Python, and certifications such as CyberArk Defender/Sentry, CISSP, CISM, or Microsoft Identity.
• Soft skills: Technical leadership, clear communication with diverse stakeholders, ability to operate in complex environments, and strong problem-solving.