Lead Privileged Access Management Engineer
Real job — pulled straight from MKS2 Technologies’s careers page · Verified July 25, 2026 · No reposts.
Job description
MKS2 Technologies is hiring a Lead Privileged Access Management Engineer — a full-time, based in Washington, DC role ($120k–$150k). Apply directly on MKS2 Technologies's careers page below.
Lead PAM Engineer – Senior
Location: Hybrid - Onsite
Department: Government IT Division
MKS2 Technologies, LLC, an award-winning high growth small business, creates innovative and customer-centric technology solutions in the areas of Cyber Security, Instructional Design and Training, Software Engineering and IT Support Services to improve the security and well-being of our clients. Our commitment to excellence and our “Mission First” orientation has resulted in steady growth and an expanding client base across government agencies. We have employees nationwide and for the past three consecutive years were named one of the fastest growing Veteran-owned companies in the nation. Please take a moment to browse through our website and learn more about what it means to serve with MKS2.
Lead PAM Engineer – Senior
Location: National Capital Region (Washington, DC) – Hybrid/Onsite
Clearance: Must be able to pass background check (U.S. work authorization required)
Salary: $120,000-$150,000
Position Overview
We are seeking a Senior Lead PAM Engineer to design, implement, and manage enterprise Privileged Access Management (PAM) solutions across hybrid environments. This role is responsible for securing privileged identities, enforcing least-privilege access, and ensuring compliance with enterprise cybersecurity and identity governance requirements.
Key Responsibilities
- Lead planning, implementation, and support of PAM platforms across enterprise environments
- Onboard and manage:
- Privileged accounts
- Vaults and safes
- Credential rotation policies
- Connection components
- Configure and support:
- Privileged session monitoring
- Audit logging and reporting
- Access reviews and governance processes
- Break-glass procedures
- Integrate PAM platforms with:
- Active Directory / Entra ID
- SIEM and logging systems
- Identity governance tools
- Endpoint and cloud environments
- Design PAM architecture and develop:
- High-level and low-level design documentation
- Implementation plans
- SOPs and operational runbooks
- Troubleshoot access, authentication, policy, and integration issues
- Collaborate with SOC, NOC, and compliance teams to ensure security alignment
- Support Zero Trust and least-privilege access strategies
Required Qualifications
- 8+ years of experience in:
- Cybersecurity engineering
- Identity & Access Management (IAM)
- Privileged Access Management (PAM)
- Enterprise security or infrastructure security
- 5+ years of hands-on experience with:
- PAM / IAM platforms
- Privileged credential lifecycle management
- Access control implementation
- Experience supporting environments across:
- On-premise
- Cloud
- Hybrid architectures
Technical Expertise
- PAM / IAM Platforms:
- CyberArk
- Microsoft Entra ID / Entra PIM
- SailPoint
- Okta
- BeyondTrust
- Delinea
- Identity & Access Technologies:
- Active Directory / LDAP
- SAML, OAuth
- MFA, RBAC
- PKI / PIV/CAC
- Core Capabilities:
- Privileged account onboarding and vaulting
- Credential rotation and lifecycle management
- Session monitoring and auditing
- Access governance and reviews
Frameworks & Methodologies
- Knowledge of:
- NIST frameworks
- Zero Trust architecture
- ICAM / FICAM principles
- Identity governance and compliance
Education
- Bachelor’s degree in Cybersecurity, IT, Computer Science, Engineering, or related field (or equivalent experience)
Certifications (Preferred/Required)
- CISSP, PMP, or equivalent cybersecurity certifications
- PAM/IAM platform certifications (CyberArk, Microsoft Identity, Okta, SailPoint, etc.)
Additional Qualifications
- Experience designing enterprise PAM architecture
- Strong documentation and communication skills
- Ability to train stakeholders and present to leadership
- Experience working in regulated or federal environments preferred
Ideal Candidate Profile
- Hands-on PAM engineer with architecture-level experience
- Strong background in identity security and access governance
- Experienced in enterprise-scale deployments and integrations
- Comfortable leading technical initiatives and mentoring teams
- Detail-oriented with strong troubleshooting and analytical skills
Diversity creates a healthier atmosphere: MKS2 Technologies is proud to be an Equal Employment Opportunity / Affirmative Action employer, and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, age, national origin, protected veteran status, disability status, sexual orientation, gender identity or expression, marital status, genetic information, or any other characteristic protected by law.
Get Lead Privileged Access Management Engineer jobs like this→
New roles from thousands of companies land hourly, straight from their careers pages. Get the freshest matches by email so you never miss one.
Email me new jobsSimilar jobs
Frequently asked questions
What is the salary for Lead Privileged Access Management Engineer at MKS2 Technologies?
The estimated salary range for Lead Privileged Access Management Engineer at MKS2 Technologies is $120,000 - $150,000 USD per year.
What skills are required for Lead Privileged Access Management Engineer at MKS2 Technologies?
The required skills for Lead Privileged Access Management Engineer at MKS2 Technologies include: Active Directory, LDAP, SAML, OAuth, NIST, SIEM, CISSP, PMP.
What is the seniority level for Lead Privileged Access Management Engineer at MKS2 Technologies?
Lead Privileged Access Management Engineer at MKS2 Technologies is a Senior / Lead level position.
How do I apply for Lead Privileged Access Management Engineer at MKS2 Technologies?
You can view the full description and apply for Lead Privileged Access Management Engineer at MKS2 Technologies on EchoJobs: https://echojobs.io/job/mks2-technologies-lead-pam-engineer-senior-sb4es.