PAM Engineer

Job Description
Our client, a leading global financial services organization specializing in investment management, asset servicing, and data-driven solutions, is seeking a Privileged Access Management (PAM) Engineer. The company supports some of the world’s largest institutional investors by safeguarding trillions of dollars in assets, providing operational efficiency, and ensuring regulatory compliance across global markets.

In this role, you’ll play a key part in designing, implementing, and managing enterprise-level PAM solutions to secure privileged accounts, enforce least-privilege access, and reduce risk exposure. This is a high-impact position where your work will directly protect sensitive financial data, meet critical compliance mandates, and enable secure operations across both on-premises and cloud environments.

Contract Duration: 6+ months
Hybrid in Quincy, MA

Required Skills & Experience

• 5+ years of hands-on experience with Privileged Access Management platforms (CyberArk, BeyondTrust, Delinea/Thycotic, or similar).

• Expertise in privileged account lifecycle management, onboarding accounts, setting and rotating credentials, managing service accounts, and enforcing access policies.

• Experience integrating PAM solutions with AWS, Azure, and hybrid environments.

• Familiarity with SIEM tools for monitoring privileged activity and security event correlation.

• Strong scripting/automation skills (PowerShell, Python, or similar) to streamline PAM operations.

• Solid understanding of Active Directory, LDAP, and identity federation.

• Knowledge of vaulting, session monitoring, access controls, and least-privilege enforcement.

Desired Skills & Experience

• Bachelor’s degree in Computer Science, Cybersecurity, or related field.

• Experience in large-scale financial services or highly regulated industries.

• Understanding of compliance requirements such as SOX, PCI-DSS, GLBA, and ISO 27001.

• Experience with REST API integrations between PAM and other enterprise security platforms.

• Familiarity with DevOps toolchains and integrating PAM into CI/CD workflows.

What You Will Be Doing

Tech Breakdown:

• 60% PAM Administration & Configuration

• 20% Scripting & Automation (PowerShell/Python)

• 20% Directory Services & Cloud Integration

Daily Responsibilities:

• 80% Hands-On Engineering, Implementation, and Troubleshooting

• 20% Team Collaboration, Documentation, and Process Improvement

You will receive the following benefits:

• Medical Insurance - Four medical plans to choose from for you and your family
• Dental & Orthodontia Benefits
• Vision Benefits
• Health Savings Account (HSA)
• Health and Dependent Care Flexible Spending Accounts
• Voluntary Life Insurance, Long-Term & Short-Term Disability Insurance
• Hospital Indemnity Insurance
• 401(k) including match with pre and post-tax options
• Paid Sick Time Leave
• Legal and Identity Protection Plans
• Pre-tax Commuter Benefit
• 529 College Saver Plan

Motion Recruitment Partners (MRP) is an Equal Opportunity Employer. All applicants must be currently authorized to work on a full-time basis in the country for which they are applying, and no sponsorship is currently available. Employment is subject to the successful completion of a pre-employment screening. Accommodation will be provided in all parts of the hiring process as required under MRP’s Employment Accommodation policy. Applicants need to make their needs known in advance.