Privileged Access Management Systems Engineer

Accountabilities: In this role, you will oversee the technical delivery and operational management of PAM capabilities, ensuring secure privileged access and reliable integration with enterprise applications. Your responsibilities will include: Provision, operate, install, configure, and maintain privileged access management software and services within the Defense Logistics Agency's AMPS Oracle Cloud Infrastructure (OCI) environment. Provide technical guidance and hands-on support for PAM planning, implementation, deployment, and ongoing operations. Recommend improvements to processes, policies, and security controls to reduce privileged access risks. Support PAM integration with DLA AMPS, an OCI-hosted application using the Oracle Identity Governance (OIG) software suite, as well as other designated applications. Implement privileged access authorization workflows and ensure requests and outcomes are captured and retained to support financial audits and cybersecurity and Information Assurance compliance. Coordinate application integrations, PAM configuration changes, upgrades, and patches in alignment with planned maintenance windows and other program activities. Ensure privileged access procedures and related controls comply with organizational standards and applicable regulatory requirements. Document technical specifications, system configurations, integration plans, test plans, and test results. Support continuous improvement of privileged access management operations, security practices, and system reliability. Requirements The ideal candidate combines hands-on engineering experience with specialized expertise in identity and privileged access management, particularly within government or defense-related environments. Required qualifications include: At least 5 years of overall professional engineering experience. At least 3 years of relevant experience with identity and access management components, including users, groups, and access policies. At least 3 years of experience installing, operating, and maintaining CyberArk solutions, including application integration. DoD-approved 8570 baseline certification at IAT Level II. CyberArk Certified Delivery Engineer (CDE) certification. Successful completion of an ANACI or NACLC background investigation before submitting an application. Ability to support secure system integrations, access authorization workflows, technical documentation, and compliance requirements. Additional qualifications that would be advantageous include: CyberArk Trustee, Defender, Sentry, or Guardian certification. Benefits Medical, dental, and vision insurance. Short-term and long-term disability coverage. Health Savings Account (HSA). 401(k) retirement plan with company matching of up to 6%. Profit-sharing program. Fully remote work arrangement.