Privileged Access Management (PAM) Specialist

About the Company

AspenView Technology Partners builds high-performing nearshore IT teams that help North American organizations move faster, innovate more effectively, and deliver stronger business outcomes. The company emphasizes a people-first mindset, a purpose-led culture, and meaningful career growth for its team members.

Why This Role Stands Out

This position offers the chance to work in a flexible environment, with hybrid, remote, and office-based options mentioned in the source. AspenView highlights a competitive base compensation package, strong growth potential, leadership visibility, and a culture that values inclusion, respect, and shared success.

Role Overview

The company is hiring an experienced PAM specialist to create a privileged access management program from the ground up for a strategic enterprise client. This is a greenfield assignment with very low existing PAM maturity, so the selected professional will be responsible for shaping the discovery approach, vaulting design, just-in-time access processes, session recording, and integration with the broader identity governance model.

The environment is a complex hybrid estate, and the solution must be designed to scale from 250 privileged users initially to 500 users over time. The role is aligned to European shift hours.

Key Responsibilities

• Map privileged accounts across a hybrid environment that includes Active Directory, Windows and Linux servers, and databases.
• Identify and categorize privileged, shared, and external privileged accounts to create a reliable access inventory.
• Design secure credential vaulting and set up automated password rotation.
• Establish policies and controls for managing privileged credentials throughout their lifecycle.
• Develop just-in-time access workflows to reduce or remove standing privileged permissions.
• Implement session proxy and recording capabilities to enable monitoring, auditing, and forensic analysis.
• Connect PAM controls with certification and access review processes inside the IGA framework.
• Work with identity governance teams to ensure PAM fits into the wider operating model.
• Support the expansion of the PAM capability across AD and Entra ID administrators, servers, databases, network/security tools, SAP administrators, ServiceNow administrators, shared accounts, and external privileged users.

Requirements

• A bachelor’s degree in Computer Science, Information Security, Information Technology, or a closely related discipline, or equivalent hands-on experience.
• Proven experience discovering privileged accounts in hybrid environments.
• Practical expertise in credential vaulting and automated credential rotation.
• Experience designing and deploying just-in-time privilege elevation.
• Background in session proxy and session recording solutions.
• Experience integrating PAM processes with IGA certification workflows.
• Strong command of a major PAM platform such as CyberArk or BeyondTrust.
• Familiarity with the Saviynt PAM module is useful when an integrated IGA/PAM architecture is chosen.
• Understanding of privileged access across hybrid estates covering identities, servers, databases, and network/security devices.
• Current CyberArk Defender or Sentry certification, or a BeyondTrust certified professional credential.

Preferred Experience

• Exposure to SAP privileged access, including Basis and administrator accounts.
• Experience designing break-glass or firefighter workflows.
• Knowledge of non-human identity credential governance.
• Experience integrating with Microsoft Entra ID Privileged Identity Management (PIM).

Additional Information

AspenView does not offer visa sponsorship for this position. Applicants must already be legally permitted to work in their country of residence.

The company is committed to equal opportunity employment and welcomes candidates from diverse backgrounds, identities, and experiences. It states that all employees should feel valued, included, and supported.