PAM Security Analyst

Job Description

As a Cybersecurity professional focused on Privileged Access Management (PAM), you will act as a key liaison between business stakeholders, development teams, and security engineers to design and implement secure access and privileged identity management solutions. You will translate business requirements and security policies into scalable technical solutions, with a strong focus on CyberArk and secrets management platforms. Experience with CyberArk is preferred; candidates with BeyondTrust Password Safe/Password Vault experience will also be considered. You will report to the PAM‑NHI IAM Leader and collaborate with cross‑functional teams to ensure authentication, authorization, and secrets management processes meet enterprise security standards and compliance requirements.

Responsibilities

• Help communication between partners, development teams, and security engineers to provide privileged access management solutions
• Help design and implement secure access and privileged identity management solutions
• Translate requirements and security policies into scalable technical solutions for applications and APIs
• Configure and maintain CyberArk components, including PVWA, CPM, PSM, Safes, Platforms, and privileged account onboarding
• Support authentication and authorization mechanisms across systems and applications
• Work with secrets management platforms, including CyberArk and HashiCorp Vault
• Contribute to the integration of PAM solutions across on‑prem and cloud environments
• Ensure authentication, authorization, and secrets management processes meet enterprise security standards and regulatory compliance requirements

Requirements

• Bachelor’s degree in Computer Science, Information Systems, or a related field, or equivalent experience
• +2 years in Cybersecurity with a strong focus on Privileged Access Management (CyberArk)
• Hands‑on work with secrets management platforms (CyberArk and HashiCorp Vault)
• Strong understanding of authentication and authorization mechanisms
• Hands‑on work with CyberArk components, including PVWA, CPM, PSM, Safes, Platforms, and Privileged Account Onboarding
• Experience with CyberArk is preferred; candidates with BeyondTrust Password Safe/Password Vault experience will also be considered

Preferred Qualifications

• Working knowledge of HashiCorp Vault, including secret engines (KV, PKI, Transit), auth methods, and policies
• Knowledge of privileged access management methodologies for on‑prem and cloud environments
• Knowledge of authentication and authorization systems (Active Directory, OAuth2.0, OIDC, AWS IAM, AppRole, Kubernetes, LDAPS, Kerberos, Certificate)
• Familiarity with Agile, Scrum, and DevOps practices
• Ability to translate complex business needs into actionable technical requirements
• Proficiency with tools such as Visio, Confluence, and JIRA
• Familiarity with automation and configuration tools (SALT, Ansible, Terraform)
• Exposure to cloud environments (AWS, Azure, or GCP)

Benefits

• Comprehensive mindfulness programs with a premium membership to Calm
• Volunteer Paid Time off available after 6 months of employment for eligible employees
• Company volunteer and donation matching program – match volunteer hours or personal cash donations to an eligible charity
• Employee Assistance Program
• Personalized wellbeing programs through the OnTrack program
• On‑demand digital course library for professional development
• Other local benefits