PIM/PAM Engineer at Capgemini Invent

San Antonio, Texas, United States -

Full Time

Start Date

Immediate

Expiry Date

07 Jul, 26

Salary

135000.0

Posted On

08 Apr, 26

Experience

2 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

BeyondTrust, Privileged Access Management, Identity and Access Management, Cybersecurity, Endpoint Privilege Management, Password Safe, Privileged Remote Access, Splunk, SAML, Active Directory, System Administration, Security Auditing, Disaster Recovery, Network Security, Identity Management

Industry

Description

Capgemini Government Solutions (CGS) LLC is seeking a PIM/PAM Engineer to support mission‑critical government clients. The ideal candidate will collaborate with a high‑performing team, engage with a broad range of stakeholders, and play a key role in expanding CGS capabilities while continuing to grow their technical and consulting expertise. The PIM/PAM Engineer is responsible for the design, implementation, and long-term sustainment of the BeyondTrust ecosystem, including Privileged Remote Access (PRA), Endpoint Privilege Management (EPM), and Password Safe. This role ensures the secure management of privileged identities within the DHA ICAM framework by maintaining a hardened appliance posture and enforcing the Principle of Least Privilege across the enterprise. The ideal candidate is a technical specialist who understands that identity is the new perimeter. You will act as the primary administrator for our PAM vaulting solutions, working closely with Infrastructure, DevOps, and Security Operations teams to integrate vaulting into every layer of our tech stack. Key Responsibilities * Lead the deployment of B Series and U-Series virtual appliances (OVA/OVF) and manage the configuration of Jumpoints for secure, segmented network access. * Assume full responsibility for the continuous health of the platform, including performing software upgrades, security patching, and SSL certificate renewals for all BeyondTrust appliances. * Periodically review and tune EPM Workstyles (Windows/Linux/macOS) to ensure least-privilege policies remain effective without impacting user productivity. * Perform routine maintenance of Password Safe, including account discovery jobs, troubleshooting credential rotation failures, and managing functional accounts for automated injections. * Execute and verify regular backups of appliance configurations and the BeyondInsight database to ensure rapid recovery in accordance with Disaster Recovery (DR) protocols. * Monitor syslog/HEC data streams to Splunk for continuous security auditing and troubleshoot integration gaps between PAM and identity providers (SAML/AD). Desired Education & Experience * Bachelor’s degree in Cybersecurity, Computer Science, or a related technical field. * Security+ CE or CASP+ desired. * BeyondTrust Certified Professional (BTCP) in PRA, EPM, or Password Safe is highly preferred. * 4+ years of IAM experience, with at least 2 years focused on BeyondTrust product administration and sustainment. * Ability to obtain and maintain a DoD Secret Clearance. U.S. Citizenship is required. About Capgemini Capgemini is a global leader in partnering with companies to transform and manage their business by harnessing the power of technology. The Group is guided everyday by its purpose of unleashing human energy through technology for an inclusive and sustainable future. It is a responsible and diverse organization of over 360,000 team members in more than 50 countries. With its strong 55-year heritage and deep industry expertise, Capgemini is trusted by its clients to address the entire breadth of their business needs, from strategy and design to operations, fueled by the fast evolving and innovative world of cloud, data, AI, connectivity, software, digital engineering and platforms. The Group reported in 2022 global revenues of €22 billion. Get The Future You Want | www.capgemini.com Disclaimer All qualified applicants will be considered for employment based on their skills, and merit. Please be aware that Capgemini may capture your image (video or screenshot) during the interview process and that image may be used for verification, including during the hiring and onboarding process. Applicants for employment in the US must have valid work authorization that does not now and/or will not in the future require sponsorship of a visa for employment authorization in the US by Capgemini. Capgemini discloses salary range information in compliance with state and local pay transparency obligations. The disclosed range represents the lowest to highest salary we, in good faith, believe we would pay for this role at the time of this posting, although we may ultimately pay more or less than the disclosed range, and the range may be modified in the future. The disclosed range takes into account the wide range of factors that are considered in making compensation decisions including, but not limited to, geographic location, relevant education, qualifications, certifications, experience, skills, seniority, performance, sales or revenue-based metrics, and business or organizational needs. At Capgemini, it is not typical for an individual to be hired at or near the top of the range for their role. The base salary range for the tagged location is $110k - $135k. This role may be eligible for other compensation including variable compensation, bonus, or commission. Full time regular employees are eligible for paid time off, medical/dental/vision insurance, 401(k), and any other benefits to eligible employees. Note: No amount of pay is considered to be wages or compensation until such amount is earned, vested, and determinable. The amount and availability of any bonus, commission, or any other form of compensation that are allocable to a particular employee remains in the Company's sole discretion unless and until paid and may be modified at the Company’s sole discretion, consistent with the law.

Responsibilities

The PIM/PAM Engineer is responsible for the design, implementation, and sustainment of the BeyondTrust ecosystem, including Privileged Remote Access and Endpoint Privilege Management. They will manage privileged identities, perform security patching, and collaborate with infrastructure and security teams to enforce the Principle of Least Privilege.