Stefanini Group is seeking a skilledCybersecurity PAM Engineerto join ourInfrastructure Services Division, within the Cybersecurity Services Tower, with direct-colleagues stretching remotely across North America, Europe and Asia, delivering high end security services to global customers.
The Cybersecurity PAM Engineeris responsible for the design, implementation, operation, and continuous improvement of Privileged Access Management (PAM) capabilities, with a strong focus on secure remote access, least privilege enforcement, and zero-trust access models.
This role will act as a technical authority for PAM solutions, with ahigh preference for hands-on experience withCyolosolution, supporting both IT and hybridIT/OTenvironments. The engineer will also contribute to architecture decisions, and ensure PAM controls align with security, compliance, and operational requirements.
A commitment to being available foron-callresponsibilities is required to ensure timely response and support when needed.
Job Responsibilities:
- Serve as Cyolo and SRA/PAM Security Subject Matter Expert.
- Lead technical design, workshops and engineering reviews.
- Integrating PAM solutions with SIEM Platforms, SOAR, ITSM, Cloud (Azure, AWS or GCP), DevOps tools and CI/CD pipelines.
- Mentor Juniors & Support Security Operations.
- Key technical activities:
- Secure remote access, deployment and configuration.
- Zero Trust design using Cyolo.
- Application-level access control without network exposure.
- Define access policies aligned with least privilege.
- Integration with identity providers (IdPs).
- Support SOC and operations teams with Cyolo-generated telemetry
- Privileged account lifecycle management.
- Just-in-Time (JIT) and Just-Enough-Access (JEA).
- Privileged session management (PSM).
- Credential vaulting and rotation.
- Service accounts and non-human identities.
- Break-glass and emergency access design.
- Segregation of duties (SoD).
