Job ID: JOB_ID_791
Position Summary
The Senior Privileged Access Management (PAM) Lead Engineer is a critical technical leadership role responsible for the end-to-end design, implementation, and governance of privileged access controls across the enterprise. This position focuses on securing service accounts, non-human identities, and administrative accounts across a diverse array of enterprise systems. The role is pivotal in advancing the organization’s Zero Trust architecture and ensuring compliance with increasingly stringent regulatory requirements. Candidates can be based in either San Francisco, CA or Cincinnati, OH.
Core Responsibilities
- Act as the primary technical authority for PAM architecture and strategy across the organization.
- Design and implement robust privileged access controls to eliminate direct privileged access and enforce the principle of least privilege.
- Enable secure operational access through the implementation and management of jump infrastructure.
- Ensure high levels of auditability and traceability for all privileged sessions and account activities.
- Collaborate extensively with Identity and Access Management (IAM), Endpoint Security, Network Security, and the Security Operations Center (SOC) teams.
- Drive measurable risk reduction through the automation of PAM workflows and the enforcement of strict security policies.
- Develop and maintain governance frameworks for non-human and service accounts.
- Lead the technical evaluation and integration of PAM tools with existing enterprise security stacks.
Technical Qualifications
- Extensive experience in Privileged Access Management (PAM) engineering and architecture.
- Deep understanding of IAM principles, including directory services, SSO, and identity lifecycle management.
- Hands-on experience with industry-leading PAM solutions (e.g., CyberArk, BeyondTrust, or Thycotic).
- Strong knowledge of Zero Trust security models and their application in large-scale environments.
- Experience securing administrative access for cloud platforms (AWS, Azure, GCP) and on-premises infrastructure.
- Proficiency in automation and scripting to streamline access requests and session monitoring.
- Familiarity with network security concepts, including micro-segmentation and secure remote access.
Professional Requirements
- Proven ability to lead complex security projects from conception through to operational handover.
- Strong analytical skills to identify security gaps and propose scalable remediation strategies.
- Excellent communication skills, with the ability to translate complex technical security concepts for non-technical stakeholders.
- Commitment to staying current with emerging threats and evolving security technologies.
- Experience working in regulated industries (Finance, Healthcare, etc.) is highly preferred.
Compensation & Location
Salary: $175,000 – $235,000 per year (Estimated)
Location: San Francisco, CA
Recruiter / Company – Contact Information
Recruiter / Employer: Sira Consulting Inc
Email: manish@siraconsultinginc.com
Recruiter Notice:
To remove this job posting, please send an email from
manish@siraconsultinginc.com with the subject:
DELETE_JOB_ID_791