Apply on Employer Site

Apogem Capital · 1 day ago

Senior Associate - PAM Engineer

New York, United States

Full-time

Hybrid

Mid, Senior Level

$121K/yr - $172K/yr

5+ years exp

Apogem Capital is part of New York Life, a company that shapes the digital landscape through innovative technology. The PAM Engineer role focuses on engineering and supporting Privileged Access Management platforms, primarily CyberArk, while contributing to broader IAM initiatives.

Financial Services

H1B Sponsor Likely

Responsibilities

Engineer, configure, and maintain CyberArk components (Vault, CPM, PSM, PTA, EPM) to support secure privileged access

Develop and maintain PAM integrations with Active Directory, Windows/Linux servers, databases, and cloud platforms (AWS, Azure)

Implement least-privilege models and onboard privileged accounts, credentials, and secrets across enterprise systems

Automate PAM operations using PowerShell or Python for onboarding, reporting, and monitoring tasks

Support periodic vault upgrades, patching, and platform hardening in alignment with security standards

Partner with infrastructure and application teams to troubleshoot integration and access control issues

Collaborate with IAM engineering peers on authentication and directory integration, MFA enforcement, and Zero Trust enablement

Assist in audit preparation and remediation for PAM controls, credential rotation, and session monitoring

Contribute to roadmap execution for PAM modernization and expansion into cloud and DevOps environments (e.g., API-based secrets management)

Maintain documentation and standard operating procedures for PAM operations and integrations

Qualification

CyberArkPrivileged Access ManagementIdentity & Access ManagementPowerShellPythonActive DirectoryCloud IAMTroubleshooting skillsCommunication skillsAttention to detail

Required

Bachelor's degree in Computer Science, Information Systems, or equivalent hands-on experience

5–8 years of experience in IAM or security engineering, with at least 3 years focused on PAM

Strong knowledge of CyberArk architecture, deployment, and administration (v12+)

Familiarity with Active Directory, Windows/Linux privilege models, and cloud IAM (AWS IAM, Azure AD)

Experience automating tasks with PowerShell or Python

Understanding of identity and security protocols (LDAP, Kerberos, SAML, OAuth/OIDC)

Working knowledge of compliance standards relevant to privileged access (e.g., NIST, NYS DFS 500.12)

Strong troubleshooting and communication skills with the ability to support production environment

Benefits

Leave programs

Adoption assistance

Student loan repayment programs

Company

Apogem Capital

Apogem Capital is an alternatives investor, with decades of experience investing in the middle market.

Founded in 2022

New York, New York, USA

201-500 employees

https://apogemcapital.com/

H1B Sponsorship

Apogem Capital has a track record of offering H1B sponsorships. Please note that this does not guarantee sponsorship for this specific role. Below presents additional info for your reference. (Data Powered by US Department of Labor)

Distribution of Different Job Fields Receiving Sponsorship

Represents job field similar to this job

Trends of Total Sponsorships

2024 (1)

2022 (1)