PAM Engineer

We are looking for a PAM Engineer to join a financial services organization in Chicago, Illinois in a hybrid contract role with a path to permanent employment, working onsite two days per week and remotely three days. This position focuses on strengthening privileged access management capabilities by designing secure solutions, improving access governance, and supporting a resilient security platform. The ideal candidate brings hands-on experience with PAM technologies, a strong understanding of access control best practices, and the ability to collaborate effectively across technical teams.

Responsibilities:
• Design and advance privileged access management architecture that supports secure, scalable, and compliant access practices across the environment.
• Translate business and security needs into technical plans, detailed designs, and actionable implementation roadmaps for PAM solutions.
• Administer privileged accounts by applying best practices, improving service processes, and introducing automation where it adds efficiency and control.
• Define and maintain access policies, entitlement models, and user access controls to support least-privilege principles.
• Lead implementation activities for PAM platform configuration, deployment, maintenance, and ongoing health monitoring.
• Partner with cross-functional teams to strengthen PAM controls, address compliance expectations, and improve overall solution effectiveness.
• Create and maintain operational documentation, support procedures, and troubleshooting guidance for long-term platform support.
• Identify technical obstacles and operational risks, then drive resolution efforts to keep projects and security objectives on track.
• Establish secure session management capabilities and privileged workstation controls to better protect high-risk identities.• 3-5 years of hands-on experience in cybersecurity engineering, with direct involvement in privileged access management or related access security solutions.
• Practical knowledge of PAM technologies, access management processes, and secure account administration.
• Experience designing or supporting access control frameworks, entitlement management, and user access governance.
• Ability to convert functional requirements into technical designs and contribute to project planning and delivery timelines.
• Familiarity with platform configuration, routine maintenance, operational monitoring, and issue resolution in a security environment.
• Strong collaboration skills with the ability to work effectively across teams and communicate technical recommendations clearly.
• Background in cybersecurity best practices, configuration management, and secure solution design.
• CyberArk or Guardian certification is strongly preferred.