Role Overview :

The PAM Optimization Engineer will be responsible for enhancing and maintaining Privileged Access Management (PAM) capabilities across virtual machine environments, ensuring secure access, compliance, and operational efficiency. This role focuses on optimizing PAM processes for local accounts, enabling Single Sign-On (SSO), managing machine identities, and integrating with identity governance platforms.

Key Responsibilities :

1. Local Account Management & Optimization :

- Discover and report existing local accounts on Windows and Linux VMs.

- Implement controls to track and manage local accounts effectively.

- Enable SSO for Windows and Linux systems via Entra ID integration.

- Configure password rotation and session recording through bastion hosts.

2. PAM Image Management :

- Work with PAM platform-specific images to ensure compliance and security standards.

3. Machine Identity Management :

- Discover and manage machine identities (robot accounts).

- Implement conditional access policies for machine identities.

- Establish lifecycle management processes and report identity data back to SailPoint.

4. Integration & Reporting :

- Ensure PAM processes integrate seamlessly with identity governance and compliance tools.

- Provide regular reporting on local accounts, machine identities, and PAM optimization metrics.

Required Skills & Qualifications :

- Strong experience with PAM solutions and optimization.

- Expertise in Windows/Linux administration and SSO configuration (Entra ID).

- Knowledge of identity governance platforms (e.g., SailPoint).

- Familiarity with bastion host configurations for session recording.

- Scripting skills (PowerShell, Python, Bash) for automation and reporting.

- Understanding of conditional access and lifecycle management for machine identities.

Preferred Certifications :

- Microsoft Entra ID or Azure AD certifications.

- Identity governance certifications (SailPoint).

Mandatory Skills :

- PAM (CyberArk or BeyondTrust), any 1 of this will fly.

- SailPoint.

- Entra ID / Azure.

- Any automation script.

- Linux & Windows administration.