TekWissen ®
Title:
Beyond Trust Engineer - PAM
Location:
Seattle, WA 98101
Job Type:
Temporary Assignment
Work Type:
Hybrid
Duration:
6 Months
Base Pay Range:
$70.00/hr - $70.00/hr
Overview: TekWissen is a global workforce management provider headquartered in Ann Arbor, Michigan that offers strategic talent solutions to our clients world-wide. The below job opportunity is to one of Our clients Who is a fashion specialty retailer founded on a simple idea: offer each customer the best possible service, quality, value, and selection. We are looking for an individual to provide specialized Information Technology support for our strategic business partners within the client Corporate Center.
Job Description:
As a PAM Platform Engineer on Client's Identity & Access Management team, you'll be a key technical specialist responsible for designing, implementing, and maintaining our enterprise-wide Privileged Access Management infrastructure using BeyondTrust.
You'll lead the rollout of BeyondTrust and support ongoing management of our privileged access solutions, including password management, endpoint privilege management, and session management capabilities across our retail technology ecosystem.
A day in the life:
PAM Platform Leadership: Serve as the primary technical expert for privileged access management solutions, including architecture, deployment, configuration, and optimization of password vaults and endpoint privilege management systems
Enterprise PAM Implementation: Design and execute large-scale PAM deployments across Windows, macOS, and Linux environments, ensuring seamless integration with existing infrastructure
Policy Development & Management: Create and maintain privilege elevation policies, credential rotation schedules, access request workflows, and governance rules aligned with security and compliance requirements
Integration & Automation: Integrate PAM solutions with ITSM platforms, SIEM tools, vulnerability scanners, directory services, and other security infrastructure to create comprehensive privileged access workflows
Troubleshooting & Support: Provide expert-level technical support for PAM platform issues, performance optimization, privileged account onboarding, and user access requests
Security & Compliance: Ensure PAM implementations meet PCI DSS, and other requirements through proper audit trails, session recording and monitoring, and privileged account governance
Documentation & Training: Develop technical documentation, procedures, and training materials for internal teams and end users
Continuous Improvement: Monitor platform performance, evaluate new features, and implement best practices to enhance security posture and operational efficiency
Skills:
4-6+ years of hands‑on experience implementing and managing enterprise PAM platforms such as CyberArk, BeyondTrust, Delinea (Thycotic) in large‑scale environments
Vendor certifications in one or more major PAM platforms (CyberArk Certified Delivery Engineer, BeyondTrust Certified Implementation Engineer, Delinea certified professional, etc.) preferred
Deep expertise in privileged account discovery, credential management, password rotation, session management, and access request workflows using enterprise PAM solutions
Strong understanding of Windows Server administration, Active Directory, Group Policy, and PowerShell scripting
Experience with Linux/Unix system administration and shell scripting for cross‑platform PAM deployments
Knowledge of networking fundamentals including protocols, ports, certificates, load balancing, and security hardening
Experience with cloud platforms (AWS, Azure) and containerization technologies (Docker, Kubernetes)
Understanding of identity and access protocols (SAML, OIDC, OAuth, SCIM, LDAP) and their integration with PAM solutions
Technical Skills:
PAM Platforms: Experience with major vendors (CyberArk Privileged Access Security, BeyondTrust Password Safe/EPM, Delinia Secret Server/Privilege Manager, Ping Identity PingOne Protect)
Operating Systems: Windows Server (2016/2019/2022), Windows 10/11, macOS, RHEL, Ubuntu, SUSE
Databases: SQL Server, MySQL, PostgreSQL, Oracle for PAM backend configuration
Virtualization: VMware vSphere, Hyper‑V, cloud‑based virtual machines
Scripting: PowerShell, Bash, Python for automation and integration tasks
Security Tools: Integration experience with vulnerability scanners, endpoint detection tools, and identity governance platforms
Preferred Qualifications:
Experience with multiple PAM vendors and platform migration/integration projects
Knowledge of DevOps practices, CI/CD pipelines, and Infrastructure as Code (Terraform, Ansible)
Familiarity with ITSM integration (ServiceNow, Jira) for ticket‑driven privileged access workflows
Experience with SIEM integration and security monitoring platforms (Splunk, QRadar, etc.)
Understanding of zero trust architecture and least privilege access principles
Experience with secrets management platforms (HashiCorp Vault, AWS Secrets Manager, Azure Key Vault)
Previous experience in retail technology environments or large‑scale enterprise deployments
Industry certifications such as CISSP, CISM, or relevant cloud security certifications.
Education:
Bachelors or relevant exp.
Seniority level Associate
Employment type Contract
Job function Other
Industries Retail Apparel and Fashion
TekWissen® Group is an equal opportunity employer supporting workforce Diversity.
#J-18808-Ljbffr
Beyond Trust Engineer - PAM
Location:
Seattle, WA 98101
Job Type:
Temporary Assignment
Work Type:
Hybrid
Duration:
6 Months
Base Pay Range:
$70.00/hr - $70.00/hr
Overview: TekWissen is a global workforce management provider headquartered in Ann Arbor, Michigan that offers strategic talent solutions to our clients world-wide. The below job opportunity is to one of Our clients Who is a fashion specialty retailer founded on a simple idea: offer each customer the best possible service, quality, value, and selection. We are looking for an individual to provide specialized Information Technology support for our strategic business partners within the client Corporate Center.
Job Description:
As a PAM Platform Engineer on Client's Identity & Access Management team, you'll be a key technical specialist responsible for designing, implementing, and maintaining our enterprise-wide Privileged Access Management infrastructure using BeyondTrust.
You'll lead the rollout of BeyondTrust and support ongoing management of our privileged access solutions, including password management, endpoint privilege management, and session management capabilities across our retail technology ecosystem.
A day in the life:
PAM Platform Leadership: Serve as the primary technical expert for privileged access management solutions, including architecture, deployment, configuration, and optimization of password vaults and endpoint privilege management systems
Enterprise PAM Implementation: Design and execute large-scale PAM deployments across Windows, macOS, and Linux environments, ensuring seamless integration with existing infrastructure
Policy Development & Management: Create and maintain privilege elevation policies, credential rotation schedules, access request workflows, and governance rules aligned with security and compliance requirements
Integration & Automation: Integrate PAM solutions with ITSM platforms, SIEM tools, vulnerability scanners, directory services, and other security infrastructure to create comprehensive privileged access workflows
Troubleshooting & Support: Provide expert-level technical support for PAM platform issues, performance optimization, privileged account onboarding, and user access requests
Security & Compliance: Ensure PAM implementations meet PCI DSS, and other requirements through proper audit trails, session recording and monitoring, and privileged account governance
Documentation & Training: Develop technical documentation, procedures, and training materials for internal teams and end users
Continuous Improvement: Monitor platform performance, evaluate new features, and implement best practices to enhance security posture and operational efficiency
Skills:
4-6+ years of hands‑on experience implementing and managing enterprise PAM platforms such as CyberArk, BeyondTrust, Delinea (Thycotic) in large‑scale environments
Vendor certifications in one or more major PAM platforms (CyberArk Certified Delivery Engineer, BeyondTrust Certified Implementation Engineer, Delinea certified professional, etc.) preferred
Deep expertise in privileged account discovery, credential management, password rotation, session management, and access request workflows using enterprise PAM solutions
Strong understanding of Windows Server administration, Active Directory, Group Policy, and PowerShell scripting
Experience with Linux/Unix system administration and shell scripting for cross‑platform PAM deployments
Knowledge of networking fundamentals including protocols, ports, certificates, load balancing, and security hardening
Experience with cloud platforms (AWS, Azure) and containerization technologies (Docker, Kubernetes)
Understanding of identity and access protocols (SAML, OIDC, OAuth, SCIM, LDAP) and their integration with PAM solutions
Technical Skills:
PAM Platforms: Experience with major vendors (CyberArk Privileged Access Security, BeyondTrust Password Safe/EPM, Delinia Secret Server/Privilege Manager, Ping Identity PingOne Protect)
Operating Systems: Windows Server (2016/2019/2022), Windows 10/11, macOS, RHEL, Ubuntu, SUSE
Databases: SQL Server, MySQL, PostgreSQL, Oracle for PAM backend configuration
Virtualization: VMware vSphere, Hyper‑V, cloud‑based virtual machines
Scripting: PowerShell, Bash, Python for automation and integration tasks
Security Tools: Integration experience with vulnerability scanners, endpoint detection tools, and identity governance platforms
Preferred Qualifications:
Experience with multiple PAM vendors and platform migration/integration projects
Knowledge of DevOps practices, CI/CD pipelines, and Infrastructure as Code (Terraform, Ansible)
Familiarity with ITSM integration (ServiceNow, Jira) for ticket‑driven privileged access workflows
Experience with SIEM integration and security monitoring platforms (Splunk, QRadar, etc.)
Understanding of zero trust architecture and least privilege access principles
Experience with secrets management platforms (HashiCorp Vault, AWS Secrets Manager, Azure Key Vault)
Previous experience in retail technology environments or large‑scale enterprise deployments
Industry certifications such as CISSP, CISM, or relevant cloud security certifications.
Education:
Bachelors or relevant exp.
Seniority level Associate
Employment type Contract
Job function Other
Industries Retail Apparel and Fashion
TekWissen® Group is an equal opportunity employer supporting workforce Diversity.
#J-18808-Ljbffr