The PAM Engineer is responsible for performing security assessments and other AD security related engineering tasks
Active Directory and Domain Controller security vulnerabilities
Privileged account security and delegation controls
Service account security controls
Group Policy security configurations
Active Directory forest and domain trust relationships
Authentication protocols and Kerberos security
Network security and communication protocols
Attack Surface identification
Providing an overview of Privileged Access Management solution capabilities
Partnering with other engineers and architects to help implement AD programs and platforms
Participating in assessments to full delivery of an AD platform
Mentorship and collaboration with Senior Architects to Junior Engineers
May require minimal out-of-town travel to client locations
Requirements
Relevant experience with Active Directory solutions provided by Cayosoft, Bloodhound, Semperis, SilverFort in an operational or consulting capacity
Knowledge in one or more of the following security technologies: Privileged Access Management, Vulnerability Management, Active Directory, Entra ID, AD authentication, Configuration Management, Endpoint, SIEM, and general networking background
Proficiency in currently supported versions of operating systems including Windows Server, Windows Workstation
Proficiency in monitoring and defending attacks utilizing security technologies, including, privileged access events, PowerShell, AD graphic interfaces, Windows logging and auditing, network forensics, and visibility solutions
Proven organizational skills with the ability to develop a detailed work plan to ensure project success
Demonstrated troubleshooting and problem solving skills and the ability to work collaboratively with other teams to resolve issues
Possess excellent written and verbal communication skills
Strong requirements elicitation and conflict resolution skills
Ability to self-direct and work independently
Ability to work in a fast-paced environment while handling multiple priorities
Minimal out-of-town travel may be required to client locations
1+ years relevant experience supporting Active Directory, Group Policy, Entra ID, Cayosoft, Bloodhound, Semperis, SilverFort security solutions in a consulting capacity (preferred)
Strong proficiency and experience in Active Directory and Entra ID Solutions (preferred)
B.S. degree in computer science, management information systems, or equivalent experience preferred