Description
GDIT has an opportunity for a Privileged Access Management (PAM) Engineer to design, implement, and maintain enterprise privileged access capabilities supporting the DoD ICAM mission.
This role ensures secure credential handling, privileged account lifecycle governance, session monitoring, and Zero Trust–aligned access protections across distributed and mission‑critical environments.
The role focuses heavily on CyberArk PAM engineering while incorporating the emerging Xage platform to secure privileged access in operational and distributed systems.
Key Responsibilities:
- Engineer, deploy, configure, and maintain CyberArk components including Vault, CPM, PSM, PVWA, PTA, and credential onboarding workflows.
- Integrate PAM controls with Active Directory, LDAP, Windows/Linux servers, cloud platforms, databases, network devices, and mission applications.
- Implement and support Xage mesh security technologies for distributed privileged access use cases and operational technology (OT) environments.
- Develop and maintain privileged account onboarding processes, credential rotation policies, access control rules, and session monitoring configurations.
- Configure and maintain privileged session recording, auditing, and behavioral analytics to detect anomalous access activity.
- Partner with cybersecurity, ICAM, and operations teams to define PAM governance standards, access policies, and Zero Trust access controls.
- Develop automation workflows (PowerShell/Python/API integrations) to improve onboarding, access provisioning, and compliance reporting.
- Perform root cause analysis, troubleshooting, and incident response for PAM‑related issues.
- Maintain detailed documentation including architecture diagrams, SOPs, onboarding guides, security procedures, and integration patterns.
- Support audit requirements by ensuring privileged access logs, reports, and system configurations meet compliance standards.
Basic Qualifications:
- Active Secret Clearance at minimum.
- Bachelor’s Degree in a related technical discipline and 8 yrs experience, or the equivalent combination of education, technical certifications or training, or work experience.
- DoD 8140 certification (Security+ CE or higher)
Required Skills/Knowledge:
- Strong CyberArk engineering experience (Vault, CPM, PSM, PVWA, PTA)
- Experience with privileged user lifecycle management, credential rotation, and session recording
- Ability to design PAM integrations across Windows, Linux, network devices, cloud platforms, and databases
- Understanding of authentication, authorization, MFA, Zero Trust, and secure access governance principles
- Experience troubleshooting PAM failures, onboarding issues, connectivity/agent problems, and session recording gaps
- Hands‑on scripting experience in PowerShell or Python
- Ability to clearly document engineering procedures, architectures, and integration steps
Desired Skills/Knowledge:
- Experience with Xage Security Mesh, distributed access control systems, or OT cybersecurity
- Experience implementing PAM in complex DoD, regulated, or multi‑tier security environments
- Familiarity with high‑availability CyberArk architectures, DR/backup strategies, and load‑balanced deployments
- Experience supporting audit requirements, compliance reporting, and privileged access forensics
- Knowledge of DevOps pipelines, APIs, automation frameworks, and CI/CD integrations for PAM workflows
Benefits:
- Comprehensive benefits and wellness packages
- 401K with company match
- Competitive pay and paid time off
- Full flex work weeks where possible
- Paid parental, military, bereavement and jury duty leave
- Short and long-term disability benefits, life, accidental death and dismemberment, personal accident, critical illness and business travel and accident insurance