PAM Engineering Lead
Acturhire
$130,000 - $170,000 / year
Need a reasonable accommodation to apply or interview? Contact us.
JobMinglr uses automated technology to recommend jobs based on profile information and job preferences. Match Score does not determine eligibility for a position, prevent a user from viewing or applying to a job, or make hiring decisions on behalf of an employer.
Description
-
Qualifications
The Requirements
5+ years in IAM/PAM SaaS engineering, including 3+ years hands-on with CyberArk (Idira) Privileged Access Manager (Vault, CPM, PSM, PVWA), with demonstrated experience leading PAM engineering teams.
Strong understanding of PAM concepts: privileged account lifecycle, credential/SSH key rotation, session isolation and monitoring, least-privilege and just-in-time access.
Experience integrating CyberArk with Active Directory/Entra ID, Windows, Unix/Linux, databases, network devices and SaaS applications.
Scripting proficiency with the CyberArk REST API, PACLI, PowerShell and Python for automation and integration.
Working knowledge of identity and secrets management standards: SAML, OAuth2/OIDC and secrets management (Conjur/AAM or equivalent).
Experience with access governance frameworks and compliance mapping (ISO 27001, SOC 2, GDPR or similar).
Demonstrated experience writing user stories, managing a backlog, or working closely with product/agile teams.
Strong stakeholder communication skills, able to translate technical detail for both engineers and business stakeholders.
Good project management skills.
Positive team-first attitude with strong verbal and written communication skills.
Must possess sound analytical and problem-solving capabilities.
Nice to have
- CyberArk certification (CyberArk Defender/Sentry - PAM).
- Experience with BeyondTrust, Delinea (Thycotic) or HashiCorp Vault as a comparison point.
- Familiarity with Agile/Scrum ceremonies and tools (Jira, Azure DevOps).
- Exposure to Zero Trust principles and NIST SP 800-53 AC/IA control families.
Note: Employment-based non-immigrant visa sponsorship and/or assistance is not offered for this specific job opportunity.
Compensation and Benefits
Base salary range and benefits information for this position are being included in accordance with requirements of various state/local pay transparency legislation. Please note that salaries may vary for different individuals in the same role based on several factors, including but not limited to location of the role, individual competencies, education/professional certifications, qualifications/experience, performance in the role and potential for revenue generation (Producer roles only).
Compensation
The base salary compensation range being offered for this role is $130,000.00-$170,000.00 USD annually. This role is also eligible for an annual short-term incentive bonus.
Company Benefits
WTW provides a competitive benefit package which includes the following (eligibility requirements apply):
- Health and Welfare Benefits: Mental health/emotional wellbeing (including Employee Assistance Program), medical (including prescription drug coverage and fertility benefits), dental, vision, Health Savings Account, Commuter Accounts, Health Care and Dependent Care Flexible Spending Accounts, company-paid life insurance, supplemental life insurance, AD&D, group accident, group critical illness, group legal, identify theft protection, wellbeing program, adoption assistance, surrogacy assistance, auto/home insurance, pet insurance and other work/life resources
- Leave Benefits: Paid holidays, annual paid time off (includes state/local paid leave where required), company-paid disability (short-term and long-term disability), other leaves (e.g., bereavement, FMLA, ADA, jury duty, military leave, and Parental and Adoption Leave), Paid Time Off (only included for Washington roles)
- Retirement Benefits: Qualified contributory pension plan (if eligible) and 401(k) plan with annual nonelective company contribution. Non-qualified retirement plans available to senior level colleagues who satisfy the plans’ eligibility requirements.
Pursuant to the San Francisco Fair Chance Ordinance and Los Angeles County Fair Chance Ordinance for Employers, we will consider for employment qualified applicants with arrest and conviction records.
This position will remain posted for a minimum of three business days from the date posted or until sufficient/appropriate candidate slate has been identified.
EOE, including disability/vets
Benefits
- Health and Welfare Benefits: Mental health/emotional wellbeing (including Employee Assistance Program), medical (including prescription drug coverage and fertility benefits), dental, vision, Health Savings Account, Commuter Accounts, Health Care and Dependent Care Flexible Spending Accounts, company-paid life insurance, supplemental life insurance, AD&D, group accident, group critical illness, group legal, identify theft protection, wellbeing program, adoption assistance, surrogacy assistance, auto/home insurance, pet insurance and other work/life resources
- Leave Benefits: Paid holidays, annual paid time off (includes state/local paid leave where required), company-paid disability (short-term and long-term disability), other leaves (e.g., bereavement, FMLA, ADA, jury duty, military leave, and Parental and Adoption Leave), Paid Time Off (only included for Washington roles)
- Retirement Benefits: Qualified contributory pension plan (if eligible) and 401(k) plan with annual nonelective company contribution. Non-qualified retirement plans available to senior level colleagues who satisfy the plans’ eligibility requirements.
About this role
Acturhire is seeking a PAM Engineering Lead to lead privileged access management initiatives in Minneapolis on a full-time, in-office basis. This role requires someone with at least five years of IAM/PAM SaaS engineering experience, including a minimum of three years hands-on with CyberArk's core components (Vault, CPM, PSM, PVWA). You'll be expected to have led PAM engineering teams before and possess deep knowledge of privileged account lifecycle management, credential rotation, session monitoring, and least-privilege access principles. The position demands strong technical chops across integrations with Active Directory, Entra ID, Unix/Linux systems, databases, and network devices, plus scripting proficiency in CyberArk's REST API, PACLI, PowerShell, and Python.
Beyond the technical foundation, this role emphasizes leadership and communication. You'll translate complex PAM architecture and compliance requirements (ISO 27001, SOC 2, GDPR) for both engineering teams and business stakeholders, manage backlogs, and work closely with product and agile teams. Project management skills and a collaborative team-first mindset are essential. A CyberArk certification is preferred, as is familiarity with competing platforms like BeyondTrust or HashiCorp Vault, exposure to Zero Trust principles, and experience with Agile tools like Jira.
The base salary ranges from $130,000 to $170,000 annually, with eligibility for a short-term incentive bonus. WTW offers comprehensive benefits including medical, dental, vision, mental health support, retirement plans with company contributions, paid time off, and various leave options. Note that visa sponsorship is not available for this position.
This role's local market on JobMinglr
Pay for this role
$130,000 to $170,000 per year
That is the employer's posted range, and where you land in it is usually decided in one conversation. Before that conversation, run the numbers: analyze an offer for this role.
Before you apply, worth reading
How JobMinglr reads this job
Every listing here is scored against your profile before you apply: skills overlap, experience level, location and work arrangement, each weighted and explained. You see the score and the reasons, not just a list. How the matching works.