Cloud PAM Engineer

Skills

About the Role

You will design and operate privileged access management across AWS and GCP. You will onboard privileged accounts, manage vaulting and access controls, automate password rotation and just-in-time access, support audits, maintain operational documentation, and advise stakeholders on cloud security risks.

Requirements

• 5+ years of relevant cybersecurity experience
• 3 years of hands-on AWS PAM experience
• Experience implementing and operating cloud PAM across AWS or GCP
• Knowledge of cloud-native IAM and PAM services Active Directory and role-based access control
• Experience with HashiCorp Vault or equivalent enterprise PAM platforms
• Experience with key and secrets management and just-in-time access frameworks
• Experience in cloud-first enterprise-scale environments
• Strong documentation communication and stakeholder management skills
• Relevant security or cloud certifications are desirable
• Experience supporting regulatory audits and compliance frameworks

Responsibilities

• Lead the design and implementation of cloud PAM solutions across AWS and GCP
• Identify onboard and manage privileged cloud accounts
• Operate password rotation session monitoring just-in-time access and secrets management
• Partner with engineering security operations compliance audit and infrastructure teams
• Support regulatory audits with evidence collection and remediation
• Maintain documentation SOPs and operational runbooks
• Mentor junior PAM team members
• Research emerging PAM IAM and cloud security capabilities

Benefits

• Matched giving for fundraising
• Flexible working hours
• Work-from-home opportunities
• Performance-related bonuses
• Insurance and medical plans
• Gym membership contributions
• Free lunch and snacks
• Birthday day off
• Two days of volunteering leave per year