Security Engineer (PAM)

Job Summary

We are seeking a skilled Security Engineer with hands-on experience in Privileged Access Management (PAM) solutions such as Sectona, Iraje, or ARCON. The ideal candidate will be responsible for securing privileged accounts, implementing access controls, monitoring endpoint security, and supporting cybersecurity initiatives across the organization. Experience with any Endpoint Detection & Response (EDR) platform is desirable but optional.

Key Responsibilities

• Administer, configure, and maintain PAM solutions such as Sectona, Iraje, or ARCON.
• Manage privileged accounts, password vaulting, session monitoring, and access governance.
• Implement role-based access controls and privilege escalation workflows.
• Monitor and analyze security events related to privileged access activities.
• Collaborate with infrastructure, application, and security teams to onboard critical systems into PAM.
• Conduct periodic access reviews, audits, and compliance checks.
• Support incident response investigations involving privileged accounts.
• Configure and maintain endpoint security solutions (EDR) to detect and respond to threats. (Good to have)
• Develop security reports, dashboards, and documentation.
• Participate in vulnerability assessments and remediation activities.
• Ensure compliance with organizational security policies and regulatory requirements.

Required Skills

Mandatory

• Hands-on experience with Sectona, Iraje, or ARCON PAM solutions.
• Strong understanding of Privileged Access Management concepts.
• Experience in:
• Password Vaulting
• Privileged Session Management
• Access Governance
• Credential Rotation
• Role-Based Access Control (RBAC)
• Knowledge of Windows and Linux administration.
• Understanding of Active Directory, LDAP, and Identity & Access Management (IAM).
• Experience in security monitoring and incident investigation.
• Knowledge of cybersecurity frameworks and best practices.

Good to Have

• Experience with any EDR solution such as:
• Microsoft Defender for Endpoint
• CrowdStrike Falcon
• SentinelOne
• Trend Micro Vision One
• Sophos Intercept X
• Familiarity with SIEM tools such as Splunk, QRadar, or Microsoft Sentinel.
• Knowledge of vulnerability management tools.
• Exposure to cloud security (AWS, Azure, or GCP).