PAM tool Administrator

Job Description:

Privileged Access Management (PAM) Tool Administrator

Job Title: Privileged Access Management (PAM) Administrator / Engineer Department: Information Security / Identity & Access Management (IAM) Employment

Type: Full-Time Job Summary The PAM Tool Administrator is responsible for the overall deployment, administration, configuration, maintenance, and support of the enterprise Privileged Access Management platform. This role ensures secure privileged access controls across infrastructure, applications, databases, and cloud environments to minimize cyber risks, ensure compliance, and protect critical digital assets.

Key Responsibilities Platform Administration & Maintenance

Administer, configure, and maintain enterprise PAM components (e.g., Vaults, Session Managers, Password Managers, and Endpoint Privilege Managers). Perform routine platform upgrades, patch management, system health monitoring, high-availability management, and disaster recovery testing. Manage platform performance tuning, capacity planning, and licensing entitlements. Onboarding & Integration Onboard and manage privileged accounts, human/non-human credentials, service accounts, and target servers/applications into the PAM system. Configure custom platform connectors, plugins, and integrations with SIEM, ITSM (e.g., ServiceNow), Active Directory/Entra ID, and CI/CD pipelines. Operations & Incident Management Serve as the primary technical point of contact (L2/L3 support) for PAM-related issues, access requests, and password rotations. Monitor privileged sessions and audit logs to detect abnormal activities or security policy violations. Provide on-call/out-of-hours support for critical privileged access incidents or scheduled changes. Compliance, Governance & Audit Conduct periodic privileged access reviews and compliance audits. Produce compliance reports and evidence for internal/external auditors (e.g., ISO 27001, SOC 2, HIPAA, PCI-DSS). Maintain standard operating procedures (SOPs), technical runbooks, and end-user training guidelines. Technical Skills & Qualifications

Education: Bachelors degree in Computer Science, Cybersecurity, Information Technology, or equivalent practical experience. PAM Expertise:

Hands-on experience administering leading PAM products such as CyberArk, BeyondTrust, Delinea (Thycotic), HashiCorp Vault, or Saviynt. Identity & Security: Strong understanding of IAM concepts, LDAP/Active Directory, Entra ID, Kerberos, Single Sign-On (SSO), and Multi-Factor Authentication (MFA). OS & Infrastructure: Proficiency in Linux/Unix administration, Windows Server management, PowerShell, and Bash scripting. Cloud & DevOps: Familiarity with AWS, Azure, or GCP privileged access models and CI/CD secret management. Networking: Solid grasp of network security fundamentals (SSH, RDP, TLS/SSL, firewalls, routing).

Preferred Certifications

Tool-Specific: Certified CyberArk Administrator / Defender, BeyondTrust Certified Administrator, or Delinea Certified Engineer. General Security: CISSP, CISM, CompTIA Security+, or GIAC (GSEC/GCIH). Soft Skills Strong analytical, troubleshooting, and root-cause analysis skills. Excellent cross-team collaboration skills for working with IT Ops, DevOps, and Audit teams. Clear written and verbal communication for technical documentation and end-user enablement.