ICAM Privileged Access Management (PAM) Engineer
General Dynamics Information Technology19 days ago
Fort Meade, MD, USASenior
Base Salary
$140k - $190k/yr
Responsibilities
- Engineer, deploy, configure, and maintain CyberArk Vault, CPM, PSM, PVWA, PTA, and credential onboarding workflows.
- Integrate PAM controls with Active Directory, LDAP, Windows and Linux servers, cloud platforms, databases, network devices, and mission applications.
- Implement and support Xage mesh security technologies for distributed privileged access and operational technology environments.
- Manage privileged account onboarding, credential rotation policies, access controls, session monitoring, recording, auditing, and behavioral analytics.
- Develop PowerShell and Python automation workflows and API integrations for onboarding, provisioning, and compliance reporting.
- Troubleshoot PAM failures, onboarding issues, connectivity and agent problems, and session recording gaps; perform root cause analysis and incident response.
- Document architectures, standard operating procedures, onboarding guides, security procedures, and integration patterns.
- Support audits and continuous improvement through privileged access logs, reports, system configurations, datasets, transformations, and visualizations.
Requirements
- Active Secret clearance is required; interim Secret clearances are not accepted.
- U.S. citizenship is required.
- A related technical bachelor’s degree and eight years of experience, or an equivalent combination of education, certifications, training, or work experience, is required.
- DoD 8140 certification, such as Security+ CE or higher, is required.
- Strong hands-on CyberArk engineering experience with Vault, CPM, PSM, PVWA, and PTA is required.
- Experience with privileged user lifecycle management, credential rotation, session recording, PAM integrations, authentication, authorization, MFA, Zero Trust, and secure access governance is required.
- Hands-on PowerShell or Python scripting experience and the ability to document engineering procedures and architectures are required.
- Experience with Xage Security Mesh, distributed access control, OT cybersecurity, DoD or regulated environments, high-availability CyberArk architectures, disaster recovery, audit support, APIs, automation frameworks, or PAM pipeline integrations is preferred.
Benefits
- Medical, dental, vision, health savings account options, and a 401(k) with company match are available.
- Benefits include paid vacation, sick and personal time, holidays, parental, military, bereavement, and jury duty leave.
- Short- and long-term disability, life, accidental death and dismemberment, personal accident, critical illness, and business travel insurance are provided or available.
- The position is onsite in Fort Meade, Maryland, with 40 scheduled weekly hours and less than 10% travel.
- GDIT offers an AI-powered career tool, internal mobility support, wellness packages, a military-friendly workplace, and full-flex work weeks where possible.
About General Dynamics Information Technology
General Dynamics Information Technology (GDIT) delivers enterprise IT, systems integration, cybersecurity, cloud, and software engineering services to U.S. federal agencies, including defense and intelligence organizations. It provides contract-based professional and managed services ranging from network operations and unified communications to training and simulation. GDIT is a business unit of General Dynamics (NYSE: GD) and is headquartered in Falls Church, Virginia.