The Role
Support USCIS privileged access modernization by implementing and operating PAM (CyberArk) and secrets management across cloud, hybrid, and on-prem environments. Tasks include least-privilege enforcement, just-in-time provisioning, privileged session controls, account discovery and lifecycle governance, RBAC/ABAC, PIV SSO integration, vaulting and randomization of credentials, auditing, STIG hardening, and supporting FISMA/compliance reporting.
Summary Generated by Built In
Who we are:
Makpar is a comprehensive professional and technical solutions provider for the Federal government. We combine functional and technical expertise in cloud engineering, data management, cybersecurity and emerging technologies to deliver mission success. We build the right IT solution for government clients by partnering with them to understand their WHAT, WHY, and HOW. Using our signature consulting methodology that we call “The Makpar Way,” we help agencies navigate the ongoing changes in the Federal technology landscape. We succeed where others fail because of our connected and engaged workforce are dedicated to delivering success for our clients and the American people.
Our Mission: We solve complex problems for the Federal government to accelerate access to citizen services.
When it comes to excellence, we deliver. Learn more about our employer brand at makpar.com/careers.
The PAM Engineer will support clients privileged access management modernization, CyberArk/vaulting, secrets management, privileged session controls, least privilege, Zero Trust, just-in-time access, privileged account discovery, and privileged access governance across cloud, hybrid, and on-prem environments.
This role requires hands-on privileged access experience, preferably with CyberArk and federal enterprise environments.
This role requires hands-on privileged access experience, preferably with CyberArk and federal enterprise environments.
Key Responsibilities
• Implement and support NIST-aligned least privilege practices.
• Support Just-in-Time provisioning for privileged access.
• Support privileged session management, privilege elevation, delegation management, and lifecycle management.
• Support enterprise secrets management use cases and integration with back-end vault platforms.
• Discover, classify, manage, and govern privileged accounts across systems and applications.
• Identify owners and usage patterns for privileged human and non-human accounts.
• Implement RBAC and ABAC for privileged accounts.
• Support PIV-based SSO for privileged access to prevent credential exposure.
• Register applications for PAM across multiple environments.
• Randomize, manage, and vault passwords, keys, and other credentials for administrative, service, and application accounts.
• Broker credentials to applications, databases, services, network devices, operating systems, and other systems.
• Coordinate vulnerability remediation with security teams.
• Support STIG configurations and hardened container images.
• Monitor, record, audit, and analyze privileged sessions and actions.
• Develop security audit dashboards and support FISMA/compliance data pulls.
• Support Active Directory tiering and permission improvements.
• Support Just-in-Time provisioning for privileged access.
• Support privileged session management, privilege elevation, delegation management, and lifecycle management.
• Support enterprise secrets management use cases and integration with back-end vault platforms.
• Discover, classify, manage, and govern privileged accounts across systems and applications.
• Identify owners and usage patterns for privileged human and non-human accounts.
• Implement RBAC and ABAC for privileged accounts.
• Support PIV-based SSO for privileged access to prevent credential exposure.
• Register applications for PAM across multiple environments.
• Randomize, manage, and vault passwords, keys, and other credentials for administrative, service, and application accounts.
• Broker credentials to applications, databases, services, network devices, operating systems, and other systems.
• Coordinate vulnerability remediation with security teams.
• Support STIG configurations and hardened container images.
• Monitor, record, audit, and analyze privileged sessions and actions.
• Develop security audit dashboards and support FISMA/compliance data pulls.
• Support Active Directory tiering and permission improvements.
Required Qualifications
• Experience implementing or operating PAM solutions.
• Experience with privileged accounts, privileged session management, secrets management, and credential vaulting.
• Experience with CyberArk or comparable PAM platform.
• Experience with least privilege, privileged account discovery, account ownership, and lifecycle governance.
• Ability to support cloud, hybrid, and on-prem privileged access use cases.
• Ability to obtain favorable EOD / suitability and maintain required access.
• Experience with privileged accounts, privileged session management, secrets management, and credential vaulting.
• Experience with CyberArk or comparable PAM platform.
• Experience with least privilege, privileged account discovery, account ownership, and lifecycle governance.
• Ability to support cloud, hybrid, and on-prem privileged access use cases.
• Ability to obtain favorable EOD / suitability and maintain required access.
Preferred Qualifications
• CyberArk PAS Vault experience.
• Experience supporting PAM adoption across many application teams.
• Experience with PIV SSO for privileged access.
• Experience with AD tiering, LDAP, CDM, STIGs, hardened containers, and FISMA dashboards.
• Experience supporting DevOps secrets management and container platform integrations.
• Prior DHS, or federal Zero Trust/PAM experience.
• Experience supporting PAM adoption across many application teams.
• Experience with PIV SSO for privileged access.
• Experience with AD tiering, LDAP, CDM, STIGs, hardened containers, and FISMA dashboards.
• Experience supporting DevOps secrets management and container platform integrations.
• Prior DHS, or federal Zero Trust/PAM experience.
Benefits:
At Makpar Corporation we understand that we all need to balance work and life – that is why we have a great benefits package, excellent training and career development opportunities, flexible work schedules along with a generous compensation package. At Makpar, we believe in keeping our employees happy, healthy and engaged. We pride ourselves in providing outstanding benefits, creating environments where employees are encouraged to be themselves, collaborate, and be inquisitive in order to achieve goals.
Start your career today and be a part of something meaningful!
Makpar is an Equal Opportunity Employer.
Skills Required
- Experience implementing or operating PAM solutions.
- Experience with privileged accounts, privileged session management, secrets management, and credential vaulting.
- Experience with CyberArk or comparable PAM platform.
- Experience with least privilege, privileged account discovery, account ownership, and lifecycle governance.
- Ability to support cloud, hybrid, and on-prem privileged access use cases.
- Ability to obtain favorable EOD / suitability and maintain required USCIS access.
- U.S. citizenship likely required for DHS IT access unless waiver is granted.
- CyberArk PAS Vault experience.
- Experience supporting PAM adoption across many application teams.
- Experience with PIV SSO for privileged access.
- Experience with AD tiering, LDAP, CDM, STIGs, hardened containers, and FISMA dashboards.
- Experience supporting DevOps secrets management and container platform integrations.
- Prior DHS, USCIS, or federal Zero Trust/PAM experience.
Am I A Good Fit?
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
Makpar provides high level strategic and project management services based on over 10 years of experience in customer focused, cutting edge technology in product development, big data and analytics. With a principal office in Loudon County, Virginia, we have access to the best and the brightest people in the industry who have a passion for helping our clients. Our highly experienced consultants will work on your most pressing challenges day in and day out and will deliver results that will delight you. We value integrity, honesty, and open communications in all our dealings. We continually strive to improve ourselves through soliciting feedback and evaluating our results against the best in the industry.
