Privileged Access Engineer (PAM) with AI - W2 Only

Title : Privileged Access Engineer (PAM) with AI Capabilities - W2 Only

Location: Alpharetta, GA (Hybrid)

Interview type : Requires Local F2F Interview

Compensation: $57.00/Hr on W2

Duration: 6 Months

Position Overview

Seeking a Senior Privileged Access Engineer with 8–10 years of experience to lead the engineering, deployment, and management of enterprise PAM infrastructures. This role blends traditional cybersecurity engineering with AI/ML tools to implement adaptive security frameworks, behavioral analytics, and intelligent automation loops.

Key Responsibilities

• PAM Infrastructure Engineering: Design, implement, and govern enterprise PAM suites (CyberArk, BeyondTrust, Delinea, or HashiCorp Vault), configuring privileged account onboarding, automated credential rotation, and Privileged Session Management (PSM).
• AI & Behavioral Analytics: Develop and integrate AI/ML models alongside User and Entity Behavior Analytics (UEBA) to systematically detect anomalous access paths, predict insider threats, and enforce risk-based adaptive authentication.
• Intelligent Threat Detection: Leverage AI-enabled SIEM tools (Splunk, Microsoft Sentinel) to execute real-time session recording monitoring, automated alert prioritization, and forensic incident investigations.
• Ecosystem Integration & Data Engineering: Build API-driven pipelines (REST, JSON) to integrate PAM layers into IAM tools (SailPoint, Okta, Entra ID), cloud environments (AWS, Azure, GCP), and security orchestration toolchains (SOAR, EDR).
• DevSecOps & Remediation Automation: Construct custom scripts via Python, PowerShell, and Bash to inject automated privileged gateways into active CI/CD deployment pipelines.

Required Skillset

• Experience: 8–10 years of professional cybersecurity experience with a dedicated focus on identity and access management (IAM) and specialized PAM technologies.
• Core PAM Suites: Expert deployment and configuration knowledge across at least one major PAM technology (CyberArk, BeyondTrust, Delinea, or HashiCorp Vault).
• AI & Security Automation: Functional familiarity combining AI models, UEBA platforms, or prompt/remediation tools to monitor session behavior and automate access decisions.
• Identity & Cloud Topologies: Practical engineering experience bridging identity vaults into cloud hyperscalers (AWS, Azure, GCP) under Zero Trust and least-privilege principles.
• Automation Engineering: Strong production scripting capability using Python, PowerShell, or Bash for policy management and SDK integrations.

Thanks & regards,

Nagababu

Technical Recruiter

ASCII Group LLC

Office: 248-906-0527

Email Id: Nagababu.Rajarapu@asciigroup.com | www.asciigroup.com