IT Engineer, Privileged Access Management (PAM)

June 3, 2026

IT Engineer, Privileged Access Management (PAM) Job Summary The Privileged Access Management (PAM) Engineer reports to the Information Security Manager and is responsible for designing, implementing, and operating enterprise PAM capabilities using Microsoft Security technologies and related platforms. This role secures privileged identities and access to critical systems, enforces least‑privilege and Zero Trust principles, and supports regulatory and audit requirements. The PAM Engineer collaborates closely with IAM, Security Operations, Infrastructure, and Application teams to reduce organizational risk while maintaining a secure and user‑friendly access model. The role may support security operations and incident response activities when privileged access is involved. Duties/Responsibilities Core PAM Engineering <ul style="margin-bottom: 0in; margin-top: 0px;" type="disc"> <li style="line-height: 15pt; margin-top: 0in; margin-right: 0in; margin-bottom: 8pt; font-size: 11pt; font-family: Calibri, sans-serif;">Design, implement, and maintain PAM solutions across cloud and hybrid environments using Microsoft Entra ID, Privileged Identity Management (PIM), Conditional Access, and related Microsoft security tooling</li> <li style="line-height: 15pt; margin-top: 0in; margin-right: 0in; margin-bottom: 8pt; font-size: 11pt; font-family: Calibri, sans-serif;">Onboard and manage privileged user, service, and application accounts, including credential vaulting, rotation, and lifecycle management</li> <li style="line-height: 15pt; margin-top: 0in; margin-right: 0in; margin-bottom: 8pt; font-size: 11pt; font-family: Calibri, sans-serif;">Configure and maintain Just‑In‑Time (JIT) access and privileged role workflows</li> <li style="line-height: 15pt; margin-top: 0in; margin-right: 0in; margin-bottom: 8pt; font-size: 11pt; font-family: Calibri, sans-serif;">Ensure all in‑scope systems, applications, vendors, and integrations are protected by PAM controls</li> <li style="line-height: 15pt; margin-top: 0in; margin-right: 0in; margin-bottom: 8pt; font-size: 11pt; font-family: Calibri, sans-serif;">Ensure availability, reliability, and security of PAM platforms and services</li> </ul> Monitoring, Detection & Incident Support <ul style="margin-bottom: 0in; margin-top: 0px;" type="disc"> <li style="line-height: 15pt; margin-top: 0in; margin-right: 0in; margin-bottom: 8pt; font-size: 11pt; font-family: Calibri, sans-serif;">Monitor PAM‑related alerts and logs using Microsoft Sentinel and Defender XDR</li> <li style="line-height: 15pt; margin-top: 0in; margin-right: 0in; margin-bottom: 8pt; font-size: 11pt; font-family: Calibri, sans-serif;">Support investigation and response to incidents involving privileged account misuse or compromise</li> <li style="line-height: 15pt; margin-top: 0in; margin-right: 0in; margin-bottom: 8pt; font-size: 11pt; font-family: Calibri, sans-serif;">Collaborate with Security Operations and MSSPs to enhance PAM monitoring and detection use cases</li> </ul> Governance, Risk & Compliance Support <ul style="margin-bottom: 0in; margin-top: 0px;"> <li style="line-height: 15pt; margin: 0in 0in 0in 0px; font-size: 11pt; font-family: Calibri, sans-serif;">Support periodic access reviews and privileged role attestations</li> <li style="line-height: 15pt; margin: 0in 0in 0in 0px; font-size: 11pt; font-family: Calibri, sans-serif;">Maintain PAM documentation, standards, runbooks, and operational procedures</li> <li style="line-height: 15pt; margin: 0in 0in 0in 0px; font-size: 11pt; font-family: Calibri, sans-serif;">Provide input to security policies, standards, and annual review processes under the guidance of IT and Security leadership</li> <li style="line-height: 15pt; margin: 0in 0in 8pt 0px; font-size: 11pt; font-family: Calibri, sans-serif;">Support audits and compliance reporting related to privileged access</li> </ul> Integration & Enablement <ul style="margin-bottom: 0in; margin-top: 0px;" type="disc"> <li style="line-height: 15pt; margin-top: 0in; margin-right: 0in; margin-bottom: 8pt; font-size: 11pt; font-family: Calibri, sans-serif;">Integrate PAM controls with IAM, endpoint, cloud, SIEM, and application platforms</li> <li style="line-height: 15pt; margin-top: 0in; margin-right: 0in; margin-bottom: 8pt; font-size: 11pt; font-family: Calibri, sans-serif;">Partner with application owners and business stakeholders to define privileged access roles and requirements</li> <li style="line-height: 15pt; margin-top: 0in; margin-right: 0in; margin-bottom: 8pt; font-size: 11pt; font-family: Calibri, sans-serif;">Provide technical guidance and training to stakeholders on PAM processes and best practices</li> </ul> Automation & Continuous Improvement <ul style="margin-bottom: 0in; margin-top: 0px;"> <li style="margin: 0in 0in 0in 0px; line-height: 107%; font-size: 11pt; font-family: Calibri, sans-serif;">Develop automation and scripting for PAM account management, reporting, and operational efficiency</li> <li style="margin: 0in 0in 0in 0px; line-height: 107%; font-size: 11pt; font-family: Calibri, sans-serif;">Track PAM KPIs and apply metric driven improvements to reduce risk and operational friction</li> <li style="line-height: 15pt; margin: 0in 0in 8pt 0px; font-size: 11pt; font-family: Calibri, sans-serif;">Evaluate emerging Microsoft security features and recommend roadmap enhancements</li> </ul> Required Technical Skills <ul style="margin-bottom: 0in; margin-top: 0px;" type="disc"> <li style="line-height: 15pt; margin-top: 0in; margin-right: 0in; margin-bottom: 8pt; font-size: 11pt; font-family: Calibri, sans-serif;">Hands‑on experience with Microsoft Entra ID, Privileged Identity Management (PIM), Conditional Access, and Microsoft Defender products</li> <li style="line-height: 15pt; margin-top: 0in; margin-right: 0in; margin-bottom: 8pt; font-size: 11pt; font-family: Calibri, sans-serif;">Strong understanding of privileged access models, least‑privilege principles, and Zero Trust security architecture</li> <li style="line-height: 15pt; margin-top: 0in; margin-right: 0in; margin-bottom: 8pt; font-size: 11pt; font-family: Calibri, sans-serif;">Experience managing identities and access within Microsoft 365 and Azure environments</li> <li style="line-height: 15pt; margin-top: 0in; margin-right: 0in; margin-bottom: 8pt; font-size: 11pt; font-family: Calibri, sans-serif;">Experience with Windows platforms, Active Directory, and authentication/authorization concepts</li> <li style="line-height: 15pt; margin-top: 0in; margin-right: 0in; margin-bottom: 8pt; font-size: 11pt; font-family: Calibri, sans-serif;">Scripting or automation experience (PowerShell preferred)</li> <li style="line-height: 15pt; margin-top: 0in; margin-right: 0in; margin-bottom: 8pt; font-size: 11pt; font-family: Calibri, sans-serif;">Familiarity with SIEM/XDR platforms (Microsoft Sentinel and Defender XDR preferred)</li> <li style="line-height: 15pt; margin-top: 0in; margin-right: 0in; margin-bottom: 8pt; font-size: 11pt; font-family: Calibri, sans-serif;">Technical documentation and runbook development skills</li> </ul> Professional & Behavioral Skills <ul style="margin-bottom: 0in; margin-top: 0px;"> <li style="margin: 0in 0in 0in 0px; line-height: 15pt; font-size: 11pt; font-family: Calibri, sans-serif;">Strong communication skills with the ability to explain technical concepts to non‑technical audiences </li> <li style="margin: 0in 0in 0in 0px; line-height: 15pt; font-size: 11pt; font-family: Calibri, sans-serif;">Proven ability to collaborate across security, IT, and business teams </li> <li style="margin: 0in 0in 0in 0px; line-height: 15pt; font-size: 11pt; font-family: Calibri, sans-serif;">Strong analytical, troubleshooting, and problem‑solving skills </li> <li style="margin: 0in 0in 0in 0px; line-height: 15pt; font-size: 11pt; font-family: Calibri, sans-serif;">Ability to operate effectively in fast‑paced and regulated environments </li> <li style="margin: 0in 0in 0in 0px; line-height: 15pt; font-size: 11pt; font-family: Calibri, sans-serif;">Continuous‑learning mindset with adaptability to evolving security technologies</li> </ul> <table style="margin-left: 98.6pt; border-collapse: collapse;" border="1" cellspacing="0" cellpadding="0"> <tbody> <tr style="height: 15.0pt;"> <td style="width: 117.4pt; border: solid windowtext 1.0pt; padding: 0in 0in 0in 0in;" valign="top"> KPI </td> <td style="width: 3.0in; border: solid windowtext 1.0pt; border-left: none; padding: 0in 0in 0in 0in;" valign="top"> Description </td> </tr> <tr style="height: 15.0pt;"> <td style="width: 117.4pt; border: solid windowtext 1.0pt; border-top: none; padding: 0in 0in 0in 0in;" valign="top"> Policy Implementation </td> <td style="width: 3.0in; border-top: none; border-left: none; border-bottom: solid windowtext 1.0pt; border-right: solid windowtext 1.0pt; padding: 0in 0in 0in 0in;" valign="top"> Timely implementation and maintenance of PAM policies and controls </td> </tr> <tr style="height: 15.0pt;"> <td style="width: 117.4pt; border: solid windowtext 1.0pt; border-top: none; padding: 0in 0in 0in 0in;" valign="top"> Incident Reduction </td> <td style="width: 3.0in; border-top: none; border-left: none; border-bottom: solid windowtext 1.0pt; border-right: solid windowtext 1.0pt; padding: 0in 0in 0in 0in;" valign="top"> Reduction in privileged account-related security incidents </td> </tr> <tr style="height: 15.0pt;"> <td style="width: 117.4pt; border: solid windowtext 1.0pt; border-top: none; padding: 0in 0in 0in 0in;" valign="top"> Audit Compliance </td> <td style="width: 3.0in; border-top: none; border-left: none; border-bottom: solid windowtext 1.0pt; border-right: solid windowtext 1.0pt; padding: 0in 0in 0in 0in;" valign="top"> Compliance with internal and external audit requirements </td> </tr> <tr style="height: 15.0pt;"> <td style="width: 117.4pt; border: solid windowtext 1.0pt; border-top: none; padding: 0in 0in 0in 0in;" valign="top"> Integration Success </td> <td style="width: 3.0in; border-top: none; border-left: none; border-bottom: solid windowtext 1.0pt; border-right: solid windowtext 1.0pt; padding: 0in 0in 0in 0in;" valign="top"> Successful integration of Microsoft Security Suite components </td> </tr> <tr style="height: 15.0pt;"> <td style="width: 117.4pt; border: solid windowtext 1.0pt; border-top: none; padding: 0in 0in 0in 0in;" valign="top"> Stakeholder Feedback </td> <td style="width: 3.0in; border-top: none; border-left: none; border-bottom: solid windowtext 1.0pt; border-right: solid windowtext 1.0pt; padding: 0in 0in 0in 0in;" valign="top"> Positive feedback from stakeholders on PAM processes and support </td> </tr> </tbody> </table> Education & Experience <ul style="margin-bottom: 0in; margin-top: 0px;" type="disc"> <li style="line-height: 15pt; margin-top: 0in; margin-right: 0in; margin-bottom: 8pt; font-size: 11pt; font-family: Calibri, sans-serif;">Bachelor’s degree in computer science, Information Technology, or a related field preferred</li> <li style="line-height: 15pt; margin-top: 0in; margin-right: 0in; margin-bottom: 8pt; font-size: 11pt; font-family: Calibri, sans-serif;">3+ years of experience in Microsoft Windows and Microsoft 365 environments with direct responsibility for identity or security controls</li> <li style="line-height: 15pt; margin-top: 0in; margin-right: 0in; margin-bottom: 8pt; font-size: 11pt; font-family: Calibri, sans-serif;">2+ years of hands‑on experience with Microsoft Azure, Entra ID, Defender, and Purview portals</li> <li style="line-height: 15pt; margin-top: 0in; margin-right: 0in; margin-bottom: 8pt; font-size: 11pt; font-family: Calibri, sans-serif;">Experience supporting hybrid (cloud and on‑premises) environments</li> <li style="line-height: 15pt; margin-top: 0in; margin-right: 0in; margin-bottom: 8pt; font-size: 11pt; font-family: Calibri, sans-serif;">Experience with application authentication (IdP) and authorization (IdM) concepts</li> <li style="line-height: 15pt; margin-top: 0in; margin-right: 0in; margin-bottom: 8pt; font-size: 11pt; font-family: Calibri, sans-serif;">Experience working across multiple concurrent projects in a dynamic environment</li> </ul> Preferred Experience & Certifications <ul style="margin-bottom: 0in; margin-top: 0px;" type="disc"> <li style="line-height: 15pt; margin-top: 0in; margin-right: 0in; margin-bottom: 8pt; font-size: 11pt; font-family: Calibri, sans-serif;">Microsoft Certified: Identity and Access Administrator Associate</li> <li style="line-height: 15pt; margin-top: 0in; margin-right: 0in; margin-bottom: 8pt; font-size: 11pt; font-family: Calibri, sans-serif;">Microsoft Certified: Security Operations Analyst Associate</li> <li style="line-height: 15pt; margin-top: 0in; margin-right: 0in; margin-bottom: 8pt; font-size: 11pt; font-family: Calibri, sans-serif;">CISSP or equivalent security certification</li> <li style="line-height: 15pt; margin-top: 0in; margin-right: 0in; margin-bottom: 8pt; font-size: 11pt; font-family: Calibri, sans-serif;">Additional Microsoft Security certifications</li> <li style="line-height: 15pt; margin-top: 0in; margin-right: 0in; margin-bottom: 8pt; font-size: 11pt; font-family: Calibri, sans-serif;">Experience with IAM, Active Directory, Windows Server, SQL Server, or networking fundamentals (DNS, DHCP, LAN/WAN)</li> </ul> About ArchWell Health: At ArchWell Health, we’re creating a community of caring designed to help our members stay healthy and engaged. By focusing on a strong provider-patient relationship, routine wellness, and staying active, our members enjoy a higher level of care and better quality of life after the age of 60. Everything we do is for seniors. We believe seniors should be heard, listened to, and given ample time by their physicians to live well later in life. Our value-based care model is designed to prevent illnesses while keeping members healthy and happy in every aspect of their life. We deliver best-in-class primary care at comfortable, accessible neighborhood centers where older adults can feel at home and become part of a vibrant, wellness-focused community. We’re passionate about caring for older adults and united by the belief that caring has the power to change everything for our members. ArchWell Health is an equal opportunity employer. Qualified applicants will receive consideration for employment without regard to their race, color, religion, age, sex, sexual orientation, gender identity, national origin, disability, veteran status, or any other protected classification.

Back to blog

DISCLAIMER