Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted yesterday

ICAM Privileged Access Management (PAM) Engineer

General Dynamics Information Technology1,217 open roles

Where
USA MD Fort Meade
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowICAM Privileged Access Management (PAM) EngineerGeneral Dynamics Information Technology · USA MD Fort Meade

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on General Dynamics Information Technology's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

12.3% of postings close within 7 days. Measured by our own scanner across the market. General Dynamics Information Technology postings stay open a median of 21 days.

Share of postings closed within
  1. 2.1%1 day
  2. 4.5%3 days
  3. 12.3%7 days
  4. 19.3%14 days
  5. 35.6%30 days
  6. 57.8%60 days
This job: posted yesterday

General Dynamics Information Technology median: 21 days open

The posting

Type of Requisition:

Regular

Clearance Level Must Currently Possess:

Secret

Clearance Level Must Be Able to Obtain:

Secret

Public Trust/Other Required:

None

Job Family:

Software Engineering

Job Qualifications:

Skills:

CyberArk Privileged Access Management, Privileged Access Management (PAM), Privileged Access Management Operations

Certifications:

None

Experience:

8 + years of related experience

US Citizenship Required:

Yes

Job Description:

ICAM Privileged Access Management (PAM) Engineer

GDIT has an opportunity for a Privileged Access Management (PAM) Engineer to design, implement, and maintain enterprise privileged access capabilities supporting the DoD ICAM mission. This role ensures secure credential handling, privileged account lifecycle governance, session monitoring, and Zero Trust–aligned access protections across distributed and mission‑critical environments.

The role focuses heavily on CyberArk PAM engineering while incorporating the emerging Xage platform to secure privileged access in operational and distributed systems.

This is an onsite position.

Meaningful Work and Personal Impact: The ideal candidate is a hands‑on PAM engineer with deep experience integrating CyberArk technologies, automating credential workflows, onboarding privileged accounts, and supporting secure access to sensitive systems. Experience with Xage or similar distributed mesh cybersecurity architectures is a strong differentiator.

Your work directly protects high‑value assets, reduces insider and external risk, supports audit readiness, and helps implement Zero Trust principles across enterprise and mission‑partner environments.

Key Responsibilities:

  • Engineer, deploy, configure, and maintain CyberArk components including Vault, CPM, PSM, PVWA, PTA, and credential onboarding workflows.
  • Integrate PAM controls with Active Directory, LDAP, Windows/Linux servers, cloud platforms, databases, network devices, and mission applications.
  • Implement and support Xage mesh security technologies for distributed privileged access use cases and operational technology (OT) environments.
  • Develop and maintain privileged account onboarding processes, credential rotation policies, access control rules, and session monitoring configurations.
  • Configure and maintain privileged session recording, auditing, and behavioral analytics to detect anomalous access activity.
  • Partner with cybersecurity, ICAM, and operations teams to define PAM governance standards, access policies, and Zero Trust access controls.
  • Develop automation workflows (PowerShell/Python/API integrations) to improve onboarding, access provisioning, and compliance reporting.
  • Perform root cause analysis, troubleshooting, and incident response for PAM‑related issues.
  • Maintain detailed documentation including architecture diagrams, SOPs, onboarding guides, security procedures, and integration patterns.
  • Support audit requirements by ensuring privileged access logs, reports, and system configurations meet compliance standards.
  • Support continuous improvement by recommending enhancements to datasets, transformations, and visualization techniques.

Basic Qualifications:

  • Active Secret Clearance at minimum. Interim Secret Clearances are not allowed.
  • Bachelor’s Degree in a related technical discipline and 8 yrs experience, or the equivalent combination of education, technical certifications or training, or work experience.
  • DoD 8140 certification (Security+ CE or higher)

Required Skills/Knowledge:

  • Strong CyberArk engineering experience (Vault, CPM, PSM, PVWA, PTA)
  • Experience with privileged user lifecycle management, credential rotation, and session recording
  • Ability to design PAM integrations across Windows, Linux, network devices, cloud platforms, and databases
  • Understanding of authentication, authorization, MFA, Zero Trust, and secure access governance principles
  • Experience troubleshooting PAM failures, onboarding issues, connectivity/agent problems, and session recording gaps
  • Hands‑on scripting experience in PowerShell or Python
  • Ability to clearly document engineering procedures, architectures, and integration steps

Desired Skills/Knowledge:

  • Experience with Xage Security Mesh, distributed access control systems, or OT cybersecurity
  • Experience implementing PAM in complex DoD, regulated, or multi‑tier security environments
  • Familiarity with high‑availability CyberArk architectures, DR/backup strategies, and load‑balanced deployments
  • Experience supporting audit requirements, compliance reporting, and privileged access forensics
  • Knowledge of DevOps pipelines, APIs, automation frameworks, and CI/CD integrations for PAM workflows

GDIT IS YOUR PLACE At GDIT, the mission is our purpose, and our people are at the center of everything we do.

  • Growth: AI-powered career tool that identifies career steps and learning opportunities
  • Support: An internal mobility team focused on helping you achieve your career goals
  • Rewards: Comprehensive benefits and wellness packages, 401K with company match, and competitive pay and paid time off
  • Community: Award-winning culture of innovation and a military-friendly workplace

The likely salary range for this position is $140,250 - $189,750. This is not, however, a guarantee of compensation or salary. Rather, salary will be set based on experience, geographic location and possibly contractual requirements and could fall outside of this range.

Scheduled Weekly Hours:

40

Travel Required:

Less than 10%

Telecommuting Options:

Onsite

Work Location:

USA MD Fort Meade

Additional Work Locations:

Total Rewards at GDIT:

Our benefits package for all US-based employees includes a variety of medical plan options, some with Health Savings Accounts, dental plan options, a vision plan, and a 401(k) plan offering the ability to contribute both pre and post-tax dollars up to the IRS annual limits and receive a company match. To encourage work/life balance, GDIT offers employees full flex work weeks where possible and a variety of paid time off plans, including vacation, sick and personal time, holidays, paid parental, military, bereavement and jury duty leave. To ensure our employees are able to protect their income, other offerings such as short and long-term disability benefits, life, accidental death and dismemberment, personal accident, critical illness and business travel and accident insurance are provided or available. We regularly review our Total Rewards package to ensure our offerings are competitive and reflect what our employees have told us they value most.

Our Identity Verification Process:

As part of the hiring process, we will ask you to complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud. You are expected to be on camera during virtual interviews. We reserve the right to take your picture to verify your identity and prevent fraud. By proceeding, you authorize the collection, processing, and use of your biometric data for identity verification and security purposes.

About Our Work:

We are GDIT. A global technology and professional services company that delivers technology solutions and mission services to every major agency across the U.S. government, defense and intelligence community. Our 26,000 experts extract the power of technology to create immediate value and deliver solutions at the edge of innovation. We operate across 50+ countries worldwide, offering leading mission-ready capabilities in AI, cloud, cyber and software development.

Join our Talent Community to stay up to date on our career opportunities and events at

gdit.com/tc.

Equal Opportunity Employer / Individuals with Disabilities / Protected Veterans

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against General Dynamics Information Technology's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on General Dynamics Information Technology's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    General Dynamics Information Technology's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.