Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 47 days ago

Privileged Access Management (PAM) Engineer

Workable (global search)108,016 open roles

Where
San Jose, CA, United States
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowPrivileged Access Management (PAM) EngineerWorkable (global search) · San Jose, CA, United States

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Workable (global search)'s own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

7.9% of postings close within 7 days. Measured by our own scanner across the market. Workable (global search) postings stay open a median of 7 days.

Share of postings closed within
  1. 1.6%1 day
  2. 3.6%3 days
  3. 7.9%7 days
  4. 14.9%14 days
  5. 34.0%30 days
This job: posted 47 days ago

Workable (global search) median: 7 days open

The posting

Samsung SDS America is a leading provider of enterprise technology and digital transformation services, helping organizations modernize infrastructure, strengthen cybersecurity, and adopt cloud, AI, and data-driven technologies. As part of Samsung SDS, a global technology and logistics organization with operations across 40 countries, Samsung SDS America combines enterprise-scale technology expertise with deep experience supporting complex business enviroments.

Our teams operate at the intersection of technology, security, and business transformation—helping customers design, implement, and operate secure enterprise environments at scale. This role provides an opportunity to contribute directly to that mission by protecting some of an organization's most sensitive assets: privileged identities, credentials, administrative access, and the infrastructure they control.

Position Overview

Samsung SDS America is seeking an experienced Privileged Access Management (PAM) Engineer to design, implement, administer, secure, and continuously improve enterprise privileged-access capabilities.

This position has a strong emphasis on CyberArk or Delinea, Windows and Linux infrastructure, authentication services, privileged-account security, and enterprise identity management. The engineer will be responsible for both the technical operation of the PAM environment and the development of security controls, automation, integrations, and governance processes that reduce the risk associated with privileged access.

The ideal candidate brings7+ years of hands-on IT infrastructure and cybersecurity experience, including significant experience supporting large-scale Microsoft Active Directory and Linux environments, privileged and service accounts, authentication infrastructure, and enterprise security controls. The successful candidate will be comfortable operating at both the engineering and operational levels—designing solutions, troubleshooting complex issues, automating repetitive processes, and partnering with infrastructure, security, application, and business teams.

This position is full time onsite at our offices in San Jose, CA.

Responsibilities

  • Design, implement, administer, and continuously improve enterprise Privileged Access Management (PAM) and identity security solutions.
  • Manage privileged accounts, service accounts, application credentials, and administrative access across Windows, Linux/Unix, databases, network devices, cloud platforms, and enterprise applications.
  • Configure and maintain PAM policies, access controls, credential management, password rotation, session monitoring, and auditing capabilities.
  • Support and administer enterprise PAM platforms, with CyberArk or Delinea as the primary technology environment; experience with other leading PAM platforms is also applicable.
  • Integrate PAM solutions with Active Directory, LDAP, MFA, SSO, SIEM, ticketing systems, cloud platforms, and other enterprise security technologies.
  • Identify and remediate excessive, dormant, orphaned, shared, unmanaged, or otherwise high-risk privileged access.
  • Implement security controls aligned with Zero Trust, least privilege, and privileged-access security best practices.
  • Develop automation for account discovery, onboarding, credential management, access reviews, compliance reporting, and other PAM processes using PowerShell, Python, APIs, or other scripting technologies.
  • Troubleshoot complex identity, authentication, privileged-access, and infrastructure security issues.
  • Support PAM platform upgrades, migrations, integrations, high availability, disaster recovery, and ongoing platform optimization.
  • Partner with cybersecurity, infrastructure, network, cloud, application, and business teams to strengthen enterprise identity and privileged-access security.
  • Support security audits, compliance requirements, vulnerability remediation, and incident-response activities involving privileged accounts and credentials.

Automation & Security Operations

  • Develop automation using PowerShell, Python, Microsoft Graph/API, and other scripting technologies.
  • Automate privileged-account discovery and onboarding, password management, access reviews, service-account inventory, and compliance reporting.
  • Integrate PAM events with SIEM and security-monitoring platforms and support investigation of privileged-access events.
  • Support security audits, compliance requirements, incident response, vulnerability remediation, and privileged-credential compromise investigations.

Infrastructure & Support

  • Support secure Windows and Linux infrastructure and apply enterprise security-hardening standards.
  • Troubleshoot identity, authentication, infrastructure, and connectivity issues across complex enterprise environments.
  • Apply fundamental networking knowledge, including TCP/IP, DNS, DHCP, routing, and firewall concepts.
  • Collaborate with cybersecurity, infrastructure, network, cloud, application, and business teams to resolve complex technical issues and continuously strengthen privileged-access security.

Requirements

  • 7+ years of professional experience in IT infrastructure, cybersecurity, identity management, systems engineering, or a related field.
  • Significant hands-on experience implementing, administering, and supporting an enterprise Privileged Access Management (PAM) solution.
  • Advanced experienced managing privilege, service, applications, and administrative accounts across Active Directory, LDAP, Windows, UNIX/Linux, databases, network devices, cloud enviroments.
  • Strong enterprise-level Microsoft Active Directory and LDAP administration experiences, including forests, domains, domain controllers, sites, OUs, Group Policies, authentication, and privilege access security.
  • Strong experience with CyberArk, Delinea (including Secret Server), or comparable enterprise PAM technologies
  • Experience implementing or supporting privileged-access security models, including Tier 0/Tier 1/Tier 2 administration, administrative account controls, and security hardening.
  • Strong understanding of IAM, PAM, authentication, authorization, MFA, SSO, Zero Trust, and least-privilege principles.
  • Experience integrating PAM or IAM technologies with Active Directory, Entra ID/Azure AD, LDAP, SAML, RADIUS, TACACS+, MFA, SIEM, and other enterprise platforms.
  • Strong scripting and automation experience using PowerShell, Python, REST APIs, Microsoft Graph, or similar technologies.
  • Strong understanding of enterprise networking fundamentals, including TCP/IP, DNS, DHCP, routing, and firewall concepts.
  • Experience supporting security audits, compliance programs, vulnerability remediation, and security investigations.
  • Strong troubleshooting, analytical, communication, and problem-solving skills.

Preferred Qualifications

  • CyberArk certification or demonstrated equivalent hands-on expertise.
  • Hands-on experience with Delinea Secret Server or other Delinea PAM products.
  • Experience migrating between PAM platforms or implementing a new enterprise PAM solution.
  • Experience with CyberArk or Delinea APIs and automated account onboarding.
  • Experience managing large-scale service-account and application-credential environments.
  • Experience implementing Zero Trust and least-privilege security architectures.
  • Experience integrating PAM solutions with cloud and hybrid identity environments.
  • Experience developing automated security controls, compliance reporting, and privileged-access reviews.
  • Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Engineering, or a related discipline is preferred.

Benefits

Samsung SDSA offers a comprehensive suite of programs to support our employees:

  • Top-notch medical, dental, vision and prescription coverage
  • Wellness program
  • Parental leave
  • 401K match and savings plan
  • Flexible spending accounts
  • Life insurance
  • Paid Holidays
  • Paid Time off
  • Additional benefits

Samsung SDS America, Inc. is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, race, color, religion, sex, sexual orientation, gender identity or expression, national origin, disability, status as a protected veteran, marital status, genetic information, medical condition, or any other characteristic protected by law.

We are committed to providing reasonable accommodations to participate in the job application or interview process for candidates with disabilities. Please let your recruiter know if you need an accommodation at any point during the interview process.

The base pay range for this role depends on appropriate skills, experience, and technical level. The base salary range is USD $150,000-175,000.

Individual base pay depends on various factors, in addition to primary work location, such as complexity and responsibility of role, job duties/requirements, and relevant experience and skills.

Certain roles are eligible for additional rewards, including annual bonus. U.S.-based employees have access to medical, dental, and vision insurance, a 401(k) plan and company match, short-term and long-term disability coverage, basic life insurance, and wellbeing benefits, among others. U.S.-based employees also receive, per calendar year, up to 10 scheduled paid holidays, and Paid Time Off.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Workable (global search)'s own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on Workable (global search)'s form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    Workable (global search)'s answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.