Privileged Access Management Engineer

- Manage and improve vaulting solutions for privileged credentials across Active Directory, Entra ID, Linux, Azure, AWS, and GCP. - Automate the rotation of credentials and enforce time-sensitive, approval-based administrative access. - Minimize standing privileges using just-in-time access and least-privilege policies. - Deploy least-privilege policies across various operating systems, including Windows, Linux, and macOS. - Replace local admin rights with regulated privilege elevation workflows. - Implement application control and privilege oversight to combat malware and insider risks. - Lead initiatives for cleaning up local admin privileges and enforce the removal of unauthorized rights. - Monitor and address stale accounts, over-privileged roles, and risky configurations. - Introduce Identity Threat Detection and Response (ITDR) capabilities. - Support the Zero Trust strategy and align PAM controls with NIST 800-63B and corporate policies. - Advocate for MFA, SSO, and passwordless authentication for privileged users. - Oversee privileged roles and accounts in Entra ID (Azure AD), AWS IAM, and GCP IAM. - Design and enforce least-privilege models for workloads, service accounts, and keys. - Integrate cloud identities with PAM tools such as vaulting, session recording, and approval workflows. - Collaborate with IGA teams to automate the provisioning, deprovisioning, and recertification of privileged accounts. - Ensure all permissions have clear business justification and ownership. - Maintain architectural diagrams, runbooks, and operational procedures. - Generate audit and compliance reports demonstrating the effectiveness of controls. - Work with audit, risk, and compliance teams to adhere to regulatory standards.