Lead Identity Engineer - PAM Lead

About The Role

The PAM Lead is responsible for designing, implementing, and managing enterprise-grade Privileged Access Management (PAM) solutions across global environments. This role ensures secure access to critical systems by enforcing policies, automating account lifecycle processes, and aligning with regulatory standards. The PAM Lead will also build and mentor a high-performing team, support incident response, and collaborate cross-functionally to integrate PAM with broader identity and security initiatives.

What You'll Do

• PAM Strategy & Implementation
• Lead the design, deployment, and management of PAM solutions using tools such as CyberArk, BeyondTrust, HashiCorp Vault, or similar.
• Define and enforce policies for privileged account lifecycle management, credential vaulting, session monitoring, and just-in-time access.
• Drive automation of provisioning / de-provisioning of privileged accounts across on-premises, cloud, and hybrid environments.
• Incident Response & Operational Support
• Act as the escalation point for privileged access-related incidents and service account issues.
• Collaborate with server, application, and security teams to troubleshoot and resolve access issues.
• Conduct root cause analysis and implement preventive measures.
• Team Leadership & Development
• Build and lead a high-performing team of PAM engineers and analysts across global locations.
• Define team roles, responsibilities, and KPIs.
• Mentor and develop team members through training, coaching, and performance feedback.
• Audit, Compliance & Governance
• Lead audit readiness and support internal / external audits related to privileged access.
• Manage access certification campaigns, policy enforcement, and remediation of audit findings.
• Ensure alignment with regulatory and industry standards such as SOX, ISO 27001, NIST, and PCI-DSS.
• Cross-Functional Collaboration
• Partner with IAM, GRC, Infrastructure, and Application teams to align PAM with broader identity and security initiatives.
• Support integration with SSO solutions (e.g., Ping Identity) and Identity Governance platforms (e.g., Saviynt).
• Infrastructure & Platform Knowledge
• Apply working knowledge of Windows, Unix / Linux, databases, and cloud platforms (AWS, Azure, GCP) to secure privileged access across diverse systems.

What You Bring

Nice to have

About Simeio And What We Do

Simeio has over 650 talented employees across the globe. We have offices in USA (Atlanta HQ and Texas), India, Canada, Costa Rica and UK.

Founded in 2007, and now backed by private equity company ZMC, Simeio is recognized as a top IAM provider by industry analysts.

Alongside Simeio's identity orchestration tool 'Simeio IO' - Simeio also partners with industry leading IAM software vendors to provide access management, identity governance and administration, privileged access management and risk intelligence services across on-premise, cloud, and hybrid technology environments.

Simeio provides services to numerous Fortune 1000 companies across all industries including financial services, technology, healthcare, media, retail, public sector, utilities and education.

Diversity & Inclusion

Simeio is an equal opportunity employer. If you require assistance with completing this application, interviewing, completing any pre-employment testing, or otherwise participating in the employee selection process, please direct your inquiries to our recruitment team - [email protected].

Thank you

About Your Application

We carefully review every application we receive. If your skills and experience match our needs, we'll be in touch. If you don't hear from us within 10 days, please don't be discouraged—we may retain your application for future opportunities. We also encourage you to check our careers page for other openings

Simeio is an equal opportunity employer. If you require assistance with completing this application, interviewing, completing any pre-employment testing, or otherwise participating in the employee selection process, please direct your inquiries to any of the recruitment team at [HIDDEN TEXT] or +1 404-882-3700.

Skills Required

Unix, Gcp, Linux, Windows, Cyberark, Azure, Aws