Lead PAM Engineer
Fairfax, VA (Onsite/Hybrid – Local candidates only)
12 Months Contract
W2 Only (No C2C)

We are seeking an experienced Lead Privileged Access Management (PAM) Engineer to join our team for a 12-month contract engagement in Fairfax, VA. The ideal candidate will lead the design, implementation, and ongoing support of PAM solutions, ensuring secure privileged access across enterprise environments.

Key Responsibilities

• Lead the design, implementation, and management of PAM solutions across enterprise systems
• Serve as the technical lead for PAM initiatives and integrations
• Manage privileged access lifecycle including onboarding, provisioning, rotation, and decommissioning
• Integrate PAM solutions with Active Directory, LDAP, cloud platforms, and enterprise applications
• Develop and enforce security policies, standards, and best practices for privileged access
• Monitor PAM operations, troubleshoot issues, and optimize system performance
• Collaborate with security, infrastructure, and compliance teams
• Support audits, risk assessments, and regulatory requirements
• Provide technical guidance and mentoring to junior engineers

Required Skills & Experience

• 10+ years of IT security or IAM experience with strong focus on PAM
• Hands-on experience with PAM tools such as CyberArk, BeyondTrust, Thycotic/Delinea, or similar
• Strong understanding of identity governance, access controls, and security frameworks
• Experience with Windows, Linux/Unix environments
• Scripting experience (PowerShell, Python, or Bash preferred)
• Strong troubleshooting and analytical skills
• Excellent communication and leadership abilities

Preferred Qualifications

• Experience in government, defense, or regulated environments
• Knowledge of cloud platforms (AWS, Azure, GCP)
• Relevant security certifications (CISSP, CISM, Security+, CyberArk certifications)