ICAM Privileged Access Management (PAM) Engineer

General Dynamics Information Technology•Fort Meade, MD

3d•$140,250 - $189,750•Onsite

About The Position

GDIT is hiring a Privileged Access Management (PAM) Engineer to design, implement, and maintain enterprise privileged access capabilities supporting the DoD ICAM mission. The role protects secure credential handling, privileged account lifecycle governance, session monitoring, and Zero Trust-aligned access across distributed and mission-critical environments. It focuses on CyberArk PAM engineering and incorporates the Xage platform to secure privileged access in operational and distributed systems. This is an onsite position at Fort Meade, Maryland. The engineer will integrate CyberArk technologies, automate credential workflows, onboard privileged accounts, and support secure access to sensitive systems. The work supports protection of high-value assets, risk reduction, audit readiness, and implementation of Zero Trust principles across enterprise and mission-partner environments. The position requires an active Secret clearance, U.S. citizenship, a DoD 8140 certification such as Security+ CE or higher, and a bachelor's degree in a related technical discipline with eight years of experience, or an equivalent combination of education, certifications, training, and work experience. The role is scheduled for 40 hours per week, with less than 10% travel and onsite work. The stated likely salary range is $140,250–$189,750, subject to experience, location, and contractual requirements. GDIT describes career growth resources, internal mobility support, comprehensive benefits and wellness packages, competitive pay and paid time off, and an innovative, military-friendly culture. Its US employee benefits include medical, dental, vision, a 401(k) with company match, paid leave, and disability, life, and other insurance offerings.

Requirements

Active Secret clearance at minimum; interim Secret clearances are not accepted.
U.S. citizenship.
Bachelor's degree in a related technical discipline and eight years of experience, or an equivalent combination of education, technical certifications or training, and work experience.
DoD 8140 certification, such as Security+ CE or higher.
Strong CyberArk engineering experience with Vault, CPM, PSM, PVWA, and PTA.
Experience with privileged user lifecycle management, credential rotation, and session recording.
Ability to design PAM integrations across Windows, Linux, network devices, cloud platforms, and databases.
Understanding of authentication, authorization, MFA, Zero Trust, and secure access governance principles.
Experience troubleshooting PAM failures, onboarding issues, connectivity or agent problems, and session-recording gaps.
Hands-on scripting experience in PowerShell or Python.
Ability to document engineering procedures, architectures, and integration steps clearly.
Onsite availability for the Fort Meade, Maryland work location.

Nice To Haves

Experience with Xage Security Mesh, distributed access control systems, or OT cybersecurity.
Experience implementing PAM in complex DoD, regulated, or multi-tier security environments.
Familiarity with high-availability CyberArk architectures, disaster recovery and backup strategies, and load-balanced deployments.
Experience supporting audit requirements, compliance reporting, and privileged access forensics.
Knowledge of DevOps pipelines, APIs, automation frameworks, and CI/CD integrations for PAM workflows.

Responsibilities

Engineer, deploy, configure, and maintain CyberArk components, including Vault, CPM, PSM, PVWA, PTA, and credential onboarding workflows.
Integrate PAM controls with Active Directory, LDAP, Windows and Linux servers, cloud platforms, databases, network devices, and mission applications.
Implement and support Xage mesh security technologies for distributed privileged access and operational technology environments.
Develop and maintain privileged account onboarding processes, credential rotation policies, access control rules, and session monitoring configurations.
Configure and maintain privileged session recording, auditing, and behavioral analytics to detect anomalous access activity.
Partner with cybersecurity, ICAM, and operations teams to define PAM governance standards, access policies, and Zero Trust access controls.
Develop automation workflows using PowerShell, Python, or API integrations to improve onboarding, access provisioning, and compliance reporting.
Perform root cause analysis, troubleshooting, and incident response for PAM-related issues.
Maintain architecture diagrams, SOPs, onboarding guides, security procedures, and integration-pattern documentation.
Support audits by ensuring privileged access logs, reports, and system configurations meet compliance standards.
Recommend continuous-improvement enhancements to datasets, transformations, and visualization techniques.

Benefits

Comprehensive benefits and wellness packages.
401(k) plan with company match.
Competitive pay and paid time off.
Medical plan options, some with Health Savings Accounts.
Dental plan options.
Vision plan.
Paid vacation, sick, personal, holiday, parental, military, bereavement, and jury duty leave.
Short- and long-term disability benefits.
Life insurance and other insurance offerings, including accidental death and dismemberment, personal accident, critical illness, and business travel and accident insurance.
Career growth tool and learning opportunities.
Internal mobility support.