Privileged Access Management (PAM) Engineer
About the role
We are seeking a highly skilled Privileged Access Management (PAM) Engineer to design, implement, and support enterprise privileged access solutions. This role will focus on securing critical systems and sensitive data using BeyondTrust technologies and HashiCorp Vault, while driving automation, compliance, and operational excellence across hybrid environments.
In this role, you will:
- Administer and maintain BeyondTrust Password Safe (PWS) and Privileged Remote Access (PRA) solutions.
- Manage privileged accounts, credential lifecycle, password rotation, and access request workflows.
- Configure and maintain session management, auditing, reporting, and alerting controls.
- Implement and support HashiCorp Vault including secrets engines, authentication methods, and policies.
- Develop and maintain automation scripts (PowerShell, Python) to streamline PAM operations and integrations.
- Integrate PAM platforms with enterprise systems such as ServiceNow, SIEM tools, and APIs.
- Design and implement secure PAM architecture across on-premises and cloud environments.
- Monitor and troubleshoot credential issues, access failures, and system performance.
- Support internal and external security audits and compliance requirements (SOX, PCI-DSS, ISO, NIST).
- Enforce least privilege and zero-trust principles for privileged access control.
We strive to provide flexibility wherever possible. Based on this role’s business requirements, this is a remote position open to qualified applicants in the United States. Regardless of your working arrangement, we are here to support a healthy work-life balance though our various wellbeing programs.
The working arrangements for this role are accurate as of the date of posting. This may change based on the project you’re engaged in, as well as business and client requirements. Rest assured; we will always be clear about role expectations.
Required Qualifications
- 2+ years of hands-on experience with:
- BeyondTrust Password Safe (PWS) administration
- BeyondTrust Privileged Remote Access (PRA)
- HashiCorp Vault (secrets management, authentication, and policies)
- Strong understanding of PAM architecture, credential management, and access control models.
- Proficiency in PowerShell and Python scripting, including REST API integrations.
- Experience working with Active Directory, Windows/Linux environments, and enterprise systems.
- Knowledge of security best practices, compliance frameworks, and auditing requirements.
- Strong analytical, troubleshooting, and problem-solving skills.
Preferred Qualifications
- Experience with Kubernetes and container security practices.
- Familiarity with Multi-Factor Authentication (MFA) solutions (e.g., Okta, Duo, Microsoft Authenticator).
- Exposure to cloud platforms (Azure, AWS, GCP) and cloud-native secrets management tools.
- Knowledge of CI/CD pipelines, Infrastructure as Code (IaC), and Git workflows.
- Understanding of modern security concepts such as Zero Trust and MITRE ATT&CK.
Salary and Other Compensation:
Applications will be accepted until June 26, 2025.
The annual salary for this position is between $84,000 - $134,000 depending on experience and other qualifications of the successful candidate.
This position is also eligible for Cognizant’s discretionary annual incentive program, based on performance and subject to the terms of Cognizant’s applicable plans.
Benefits: Cognizant offers the following benefits for this position, subject to applicable eligibility requirements:
· Medical/Dental/Vision/Life Insurance
· Paid holidays plus Paid Time Off
· 401(k) plan and contributions
· Long-term/Short-term Disability
· Paid Parental Leave
· Employee Stock Purchase Plan
Disclaimer: The salary, other compensation, and benefits information is accurate as of the date of this posting. Cognizant reserves the right to modify this information at any time, subject to applicable law.
À propos de nous
Cognizant (NASDAQ: CTSH) est un concepteur d’IA et un fournisseur de services technologiques. Avec notre gamme de solutions IA full-stack, nous accompagnons nos clients au carrefour de l’investissement dans l’IA et de la valeur ajoutée. Notre grande expertise sectorielle, des processus et de l’ingénierie nous permet de convertir le contexte propre à chaque entreprise en systèmes technologiques amplificateurs du potentiel humain, générateurs de résultats tangibles et garants de l’avantage des acteurs internationaux dans un monde en constante évolution. Découvrez notre méthode sur www.cognizant.com ou suivez @cognizant.
Renseignments suppplémentaires sur l'emploi
Les informations sur la rémunération sont exactes à la date de publication. Cognizant se réserve le droit de modifier ces informations à tout moment, conformément aux lois applicables.
Les exigences linguistiques varient selon les postes, mais nous demandons à tous les candidats d’avoir une connaissance de base de l’anglais afin de faciliter les communications internes à l’échelle de l’entreprise. Pour les postes basés au Québec, une maîtrise de l’anglais est requise puisque vous fournirez des services et collaborerez avec des parties prenantes situées hors de la province, qui ne parlent pas nécessairement le français.
Cognizant est un employeur souscrivant au principe de l’égalité d’accès à l’emploi. Votre candidature et votre dossier ne seront pas examinés en fonction de la race, de la couleur, du sexe, de la religion, des croyances, de l'orientation sexuelle, de l'identité de genre, de l'origine nationale, du handicap, de l'information génétique, de la grossesse, du statut d'ancien combattant ou de toute autre caractéristique protégée telle que décrite par les lois fédérales, provinciales ou locales.
Si vous avez un handicap qui nécessite un aménagement raisonnable pour rechercher une offre d'emploi ou poser une candidature, envoyiez un courriel à [email protected] avec votre demande et vos coordonnées.
