Consultant - Platform Engineer - Privileged Access Management (PAM)

Everyone deserves to be secure. Our mission at Kalles Group is to help secure the future for companies of all shapes and sizes.

While our expertise spans multiple disciplines, our method remains consistent: building trust and relationship with people -- whether you are a client, a consultant, or--in this case--a candidate.

No matter what role you come from--whether you're an executive or just starting your career--you can expect our highest level of attention and respect. We want to find the right fit for each role, but we also want you to find the right fit for your career.

We believe the best way to show you what our team is like is to treat you like you're already a part of it. We hope you'll consider joining our team of experienced professionals who are building their careers at Kalles Groupand having fun while doing it.

As a Privileged Access Management (PAM) Platform Engineer, you will serve as the subject matter expert for the design, implementation, and ongoing management of enterprise PAM solutions. Your work will directly enhance the organization's security posture by managing privileged account security, integrating PAM systems into existing infrastructure, and driving operational efficiency through automation.

Key Responsibilities:

• Lead the architecture, deployment, and optimization of PAM solutions, including password vaulting, endpoint privilege management, and session management.
• Plan and execute enterprise-scale PAM implementations across Windows, macOS, and Linux platforms.
• Define and maintain privilege elevation policies, credential rotation processes, and governance workflows in alignment with compliance standards.
• Integrate PAM platforms with ITSM, SIEM, vulnerability management, directory services, and other enterprise security systems.
• Provide advanced troubleshooting, performance optimization, and support for PAM-related incidents and access requests.
• Ensure compliance with industry standards by implementing audit trails, session recording, and privileged account governance.
• Create and maintain technical documentation, standard operating procedures, and training materials.
• Continuously evaluate new PAM features and best practices to improve security and efficiency.

Your values:

• Integrity: You believe in doing the right thing, even when it's uncomfortable, seemingly inefficient, or costly.
• Purposefulness: You have a desire to serve others with your skillset and an openness to continuous learning and growth.
• Ownership: You stick to your commitments, follow up with action, and seek clarity in communication & expectations.

Your experience:

• 46+ years of hands-on experience implementing and managing enterprise PAM platforms (pref experience in BeyondTrust).
• Vendor certifications for PAM platforms are a plus (e.g., CyberArk Certified Delivery Engineer, BeyondTrust Certified Implementation Engineer, Delinea Certified Professional).
• Deep knowledge of privileged account discovery, credential management, password rotation, and session management.
• Strong skills in Windows Server administration, Active Directory, Group Policy, and PowerShell scripting.
• Experience with Linux/Unix administration and shell scripting for multi-platform PAM deployment.
• Understanding of network fundamentals, including protocols, ports, certificates, load balancing, and system hardening.
• Experience with cloud environments (AWS, Azure) and containerization (Docker, Kubernetes).
• Familiarity with identity and access protocols (SAML, OIDC, OAuth, SCIM, LDAP).

Preferred qualifications:

• Experience working with multiple PAM solutions and managing migration/integration projects.
• Knowledge of DevOps, CI/CD pipelines, and Infrastructure as Code tools (Terraform, Ansible).
• Integration experience with ITSM platforms (ServiceNow, Jira) and SIEM systems (Splunk, QRadar).
• Understanding of zero trust security principles and least privilege access.
• Familiarity with secrets management platforms (e.g., HashiCorp Vault, AWS Secrets Manager, Azure Key Vault).
• Industry certifications such as CISSP, CISM, or cloud security credentials.

Technical Skills:

• PAM Platforms: CyberArk Privileged Access Security, BeyondTrust Password Safe/EPM, Delinea Secret Server/Privilege Manager, PingOne Protect.
• Operating Systems: Windows Server, Windows 10/11, macOS, RHEL, Ubuntu, SUSE.
• Databases: SQL Server, MySQL, PostgreSQL, Oracle.
• Virtualization: VMware vSphere, Hyper-V, and cloud-based virtual machines.
• Scripting: PowerShell, Bash, Python for automation and integration.
• Security Tools: Experience integrating PAM with vulnerability scanners, EDR tools, and identity governance platforms.

What We Offer:

The annual salary range for this role is $125,000-$150,000.

Location: This role is hybrid and requires 3 days per week in office in Seattle, WA.

How To Apply:

Please fill out the form below (including uploading your most recent resume) and we'll be in touch! We know imposter syndrome can be a barrier to many great applicants. We hope you'll still consider applying. That's why we've made the application process as short and simple as possible.

Even if you're not a fit for the role, you can expect to hear back from us! We want you to have the best experience as a candidate, so please feel free to share feedback at any stage of the process.