PAM Solution Architect

Hybrid Pathways • Remote (New Brunswick, NJ, US) • 4m ago

About the opportunity:
New Era Technology is seeking a PAM (Privileged Access Management) Solution Architect Consultant to provide technical support for enterprise IAM security architecture (Identity & Access Management) objectives. Candidate must have a strong background in designing, building and maintaining privileged access management solutions for complex global directory environments. This is a 12-week (3-month) remote project opportunity.

Key Responsibilities

Develop a Comprehensive PAM Strategy: Including a vision for the future state, strategic goals, and objectives aligned with the organization’s business and IT strategy.
Create a Detailed PAM Reference Architecture: Covering all necessary components, integrations, and technology stack recommendations for the whole enterprise.
Establish Robust PAM Standards and Policies: Ensure comprehensive policies for access control, credential management, monitoring, auditing, and compliance, building on PAM Program work-in-progress.
Perform a Current State Assessment and Gap Analysis: Including all relevant platforms, environments, and existing PAM implementations including those of Technology Services and SAP.
Develop a Multi-Year Implementation Roadmap: Detailed, phased roadmap with key initiatives, milestones, and resource requirements.
Provide Baseline Architectural Artifacts: Business, functional, and technical requirements documents, as well as reference architecture diagrams.
Define the Technology Stack: Clear definition and recommendations for the PAM technology stack.
Create a Framework for Assessing PAM Controls Coverage: Build on emerging framework for assessing PAM controls coverage across platforms (e.g., infrastructure technologies, applications technologies) and environments (e.g., DataCenter, IaaS, PaaS, SaaS, DevOps) as well as maturity of PAM implementation.

Required Skills

2 – 3 years’ experience architecting PAM Platforms (CyberArk, HashiCorp, BeyondTrust, etc.)
5 – 7 years’ experience engineering PAM Platforms (CyberArk, HashiCorp, BeyondTrust, etc.)
Experience engineering or architecting PAM systems for IAM and/or CIAM platforms
Experience with cloud-based authentication engines (e.g., Okta)
Experience with PAM Platform implementations and integrations
Experience with IAM functions including but not limited to role-based access control, access management, multi-factor authentication and certifications.
Hands on experience with IAM Protocols (i.e., OAuth, SAML)
Experienced in applying PAM to secure Windows Administrative environments, including Active Directory
Experienced in working in a Windows Tiered Administrative model
Experienced with leading PAM systems such as BeyondTrust Password Safe, OneIdentity Safeguard, CyberArk etc.
Experienced in applying Privileged Access Management in Cloud environments (Azure, AWS etc.)
Experienced in building de-centralized global solutions that are tracked centrally
Experienced with zero-trust for PAM solutions
Experienced with integrating PAM systems for centralized global visibility
Experienced in Cloud Infrastructure and Entitlement Management (CIEM)
Demonstrable track record in:

Architecting and engineering PAM services within a large global enterprise
successfully identifying PAM opportunities within the enterprise
ability to create gap assessments, framework for assessments and architecture and roadmap for customers

Excellent analytical skills
Ability to leverage existing documentation
Collaborative team worker – both in person and virtually using MS Teams or similar
Excellent documentation skills; demonstrated proficiency in Microsoft Office including Word, Excel and PowerPoint
Ability to work as liaison between business and information security / information technology
Flexibility to accommodate working across different time zones
Excellent interpersonal communication skills with strong spoken and written English
Business outcomes mindset
Solid balance of strategic thinking with detail orientation
Self-starter, ability to take initiative
Project management and organizational skills with attention to detail

Preferred Skills

BeyondTrust or equivalent PAM platform experience
Azure PIM or equivalent PAM cloud platform experience
HashiCorp or equivalent PAM platform experience

Required Education

Bachelor's degree (BA/BS) from four-year college or university; or equivalent training, education, and work experience. Cybersecurity certifications such as CISSP, CISM, etc.

About Us:
New Era Technology is a community of like-minded, like-hearted people who share the same vision and values: Community, Integrity, Agile, and Committed.

These visions and values tie into our daily work, to serve as a trusted technology adviser to our customers. Often a single project leads to a long-lasting partnership where we have the continued privilege of helping our customers deliver valuable technology solutions that improve efficiencies and experiences to their employees and customers.

EEO Statement:
New Era Technology is proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, marital status, national origin, genetics, disability, age, or veteran status.