Privileged Access Management Engineer
Vanguard · Malvern, Arkansas, US
Core Responsibilities - Implement and manage the privileged access lifecycle for Windows and Linux servers. - Onboard, classify, and manage privileged accoun...
Job description
Core Responsibilities Implement and manage the privileged access lifecycle for Windows and Linux servers. Onboard, classify, and manage privileged accounts, including local admin, service accounts, and break-glass identities. Configure credential rotation policies and enforce strong authentication standards. Deploy and maintain Just-in-Time (JIT) and Just-Enough Access (JEA) models. Integrate PAM with cloud-native identity frameworks such as AWS IAM Roles, Azure Managed Identities, and GCP Service Accounts. Operate and administer CyberArk components (Safes, CPM, PSM/PSMP) and cloud-native secret stores. Automate PAM tasks using PowerShell, Python, or Bash. Use Infrastructure-as-Code (Terraform preferred) to define and deploy PAM integrations and policies. Work with the business to be able to accomplish Privilege Access Operations standard workflows as well as efficiently resolve complex incidents through creative problem solving. Work with enterprise stakeholders to understand business requirements and IT standards that influence how PAM solutions/services should operate. Be action oriented; taking on new opportunities and tough challenges with a sense of urgency, high-energy and e...