Privileged Access Engineer

Privileged Access Engineer

The Privileged Access Engineer (PAM) with AI Capabilities is responsible for securing privileged access across enterprise systems by implementing advanced PAM solutions while leveraging Artificial Intelligence (AI) and Machine Learning (ML) to enhance threat detection, automation, and decision-making. This role blends cybersecurity engineering with AI-driven analytics to proactively identify risks, automate privileged access controls, and enable adaptive security frameworks.

Key Responsibilities:

• PAM Engineering & Implementation
• Design, implement, and manage PAM solutions: CyberArk, BeyondTrust, Delinea, HashiCorp Vault
• Configure: Privileged account onboarding and lifecycle management
• Password vaulting, rotation, and credential management
• Privileged Session Management (PSM)
• Implement Just-In-Time (JIT) and Just-Enough-Access (JEA) models

AI-Driven Security & Automation

• Develop and integrate AI/ML models to:
• Detect anomalous privileged access behavior
• Identify insider threats and suspicious activity
• Predict and prevent access misuse
• Use AI for: Behavioral analytics (UEBA – User & Entity Behavior Analytics)
• Risk-based authentication and access decisions
• Implement intelligent automation for: Privileged account onboarding/offboarding
• Access approvals and policy enforcement

Advanced Monitoring & Threat Detection

• Leverage AI-enabled SIEM tools (e.g., Splunk, Client Sentinel) for:
• Real-time monitoring of privileged sessions
• Automated alert prioritization
• Implement: Session recording and playback
• AI-driven anomaly detection and alert tuning
• Support incident response and forensic investigations

Integration & Data Engineering

• Integrate PAM with:
• IAM systems (Entra ID, Okta, SailPoint)
• Security tools (SIEM, SOAR, EDR/XDR)
• Cloud platforms (AWS, Azure, GCP)
• Work with: APIs, REST services, JSON
• Data pipelines for feeding security analytics platforms
• Build AI-ready datasets from logs and access activity

Governance, Risk & Compliance

• Enforce: Least privilege access
• Zero Trust principles
• Support compliance with: SOX, GDPR, PCI-DSS, ISO 27001
• Generate AI-assisted compliance reports and audit insights
• Contribute to policy definition and governance frameworks

Automation & DevSecOps

• Develop scripts and automation workflows using: Python, PowerShell, Bash
• Integrate PAM into: CI/CD pipelines (DevSecOps)
• Implement AI-assisted remediation workflows using SOAR tools

Collaboration & Innovation

• Partner with: Security operations (SOC) teams
• Data science / AI teams
• IAM architects and cloud engineers
• Evaluate emerging AI-driven security tools
• Drive innovation in Intelligent Identity Security and Autonomous Access Management

Skills: Cyber Security - IAM Professional Services~Cyber Ark Experience Required: 10 & Above