PAM Engineer (with AI)

Role Summary
This position requires an experienced technical professional with a strong background in privileged access management, identity and access security, and AI platform engineering. The role involves supporting and developing secure, enterprise-grade AI and LLM solutions within complex, regulated environments. Responsibilities include managing access controls, supporting AI platform deployment, and ensuring security and compliance across distributed systems.

Responsibilities

• Manage and support enterprise Privileged Access Management (PAM) platforms such as CyberArk, BeyondTrust, Delinea, or One Identity.
• Design and implement access control policies, including least privilege, JIT access, RBAC, and session management.
• Support the development and deployment of AI, large language models (LLMs), automation, and platform engineering solutions.
• Integrate AI solutions with existing enterprise security and identity management platforms.
• Support the development of secure AI systems, adhering to industry frameworks such as NIST AI RMF and ISO AI governance standards.
• Maintain and enhance cloud-native architectures, APIs, distributed systems, and data pipelines.
• Support monitoring, logging, observability, and compliance requirements for production AI and security platforms.
• Remediate privileged access risks, including hardcoded credentials and unmanaged service accounts.
• Support audit, risk management, compliance, and regulatory testing activities.
• Collaborate with cross-functional teams to ensure secure deployment and operation of AI and enterprise systems.

Qualifications

• Hands-on experience as a PAM Engineer, IAM Engineer, Security Engineer, AI Platform Engineer, or similar role.
• Expertise with enterprise PAM platforms such as CyberArk, BeyondTrust, Delinea, or One Identity.
• Strong understanding of privileged access, service accounts, non-human identities, least privilege, JIT access, RBAC, and session control.
• Proven experience supporting AI, LLM, automation, or platform engineering solutions.
• Deep knowledge of LLM concepts including prompt engineering, grounding, hallucination mitigation, drift monitoring, and evaluation.
• Experience working with agent frameworks, orchestration patterns, multi-agent workflows, and agent lifecycle management.
• Solid understanding of cloud-native architecture, APIs, distributed systems, and MLOps/LLMOps practices.
• Ability to integrate AI solutions with enterprise platforms, security controls, and compliance processes.
• Experience in secure software development, access control design, logging, and observability.
• Proven ability to operate effectively within large, complex, regulated enterprise environments, preferably in financial services.
• Excellent problem-solving, communication, and collaboration skills.
• Availability to work in a hybrid environmen.
• In compliance with federal law, all persons hired must verify their identity and eligibility to work in the United States and complete the required employment eligibility verification form upon hire. Candidates must be legally authorized to work in the United States without employer sponsorship, now or in the future.
   

Publishing Pay Range: $82.91 – $86.56 hourly

This position offers a hybrid schedule, with time split between the office and remote work.