PAM Engineer

My responsibilities:

• Analyze and implement requirements in the area of Privileged Access Management (PAM) to ensure secure and efficient handling of privileged identities and access.
• Operate, develop and enhance our BeyondTrust PAM solutions for privileged user and account management in close collaboration with internal specialist departments and external partners.
• Operate, further develop and optimize our Bitwarden password manager solution, which is operated on Azure Kubernetes Service (AKS), with a
• focus on stability, security and usability.
• Design and implement automation and integration solutions (e.g. using PowerShell, REST APIs, and CI/CD pipelines) to increase the efficiency and quality of PAM and password management processes.
• Integrate PAM and password management processes into the existing system landscape (e.g. IAM, ticketing, monitoring) and ensure smooth end-to-end workflows.
• Document requirements, architectures and the implemented solutions in a structured and comprehensible way.
• Work with interdisciplinary teams (e.g. Security, Infrastructure, IAM, DevOps) to achieve shared goals and increase overall effectiveness.

The knowledge I own:

Must-haves:

• Experience in implementing and operating Privileged Access Management (PAM) processes and solutions.
• Practical experience with BeyondTrust PAM (e.g. policy and workflow configuration, account onboarding, session management, credential lifecycle).
• Experience in operating and further developing a password manager solution, ideally Bitwarden, including configuration, updates, integration and user support.
• Experience with Kubernetes, ideally Azure Kubernetes Service (AKS), for operating and maintaining container-based applications (deployment, scaling, monitoring, troubleshooting).
• Solid experience with Microsoft Azure (e.g. resource management, networking, security concepts) in a production environment.
• Strong knowledge of PowerShell for automation and administration tasks in the PAM and password management context.
• Experience in working with and developing REST APIs for system integration and data exchange.
• Confident handling of SQL and database management systems for analysis, reporting and troubleshooting.
• Very good skills in Excel for data analysis, reporting and quality checks (e.g. access reviews, account inventories).
• Strong communication and coordination skills, as well as a structured and solution-oriented way of working.

Technology Stack:

• BeyondTrust PAM
• Bitwarden
• Azure Kubernetes Service (AKS) / Kubernetes
• Microsoft Azure
• PowerShell
• REST APIs
• SQL / Database systems
• Git
• ServiceNow

Nice-to-haves:

• Experience with Identity & Access Management (IAM) concepts (e.g. joiner/mover/leaver, role-based access control) and their interaction with PAM.
• Knowledge of Active Directory and identity directories, especially in the context of privileged accounts and access structures.
• Experience integrating PAM and password management solutions with ServiceNow or other ITSM tools (e.g. for approvals, requests, incident/change processes).
• Experience with Git-based workflows (e.g. Git) for managing scripts, configurations and documentation.