Systems Engineer II, PAM

What you'll do

• Engineer and support Privileged Access Management (PAM) solutions including vaulting, session control, and Just-In-Time access.
• Administer secrets management platforms for credential onboarding, vault configuration, and automated secret rotation.
• Manage the lifecycle of non-human identities including provisioning, governance, and ownership validation for service accounts.
• Support enterprise certificate lifecycle management including issuance, renewal, revocation, and automation.
• Design, test, and implement automation workflows for privileged identity and certificate management.
• Provide operational support through system configuration, troubleshooting, incident response, and 24x7 on-call rotation.
• Produce reporting and analytics on privileged access, secrets rotation posture, and certificate health.
• Maintain technical documentation, configuration standards, and operational runbooks to ensure secure platform management.

What we're looking for

• Candidates must independently possess the eligibility to work in the United States for any employer.
• Bachelor’s degree or equivalent experience.
• 3–5 years of experience in IAM, Security Engineering, or Infrastructure Security.
• Hands-on experience with PAM platforms, secrets management tools, AWS IAM, and enterprise PKI/certificate management.
• Experience administering Active Directory service accounts and knowledge of RBAC, JIT access, and service/workload identity security.
• Scripting experience in PowerShell, Python, or Bash and familiarity with REST APIs and automation tooling.
• Network troubleshooting knowledge including TCP/IP, DNS, and firewall rules.
• Relevant technical certifications (preferred).