New

PAM Engineer (CyberArk/hashivault)

TEKsystems
$53.60 - $55.00 / hr
life insurance, sick time, 401(k), retirement plan
United States, Texas, Irving
May 20, 2026
Overview One of our top financial services clients is seeking a PAM Engineer to support ongoing product maturity and automation initiatives within their Privileged Access Management (PAM) environment. This role will focus on expanding capabilities within CyberArk and/or HashiCorp Vault, moving beyond basic credential storage into automation, credential rotation, and enhanced user experience. Key Responsibilities * Support design and engineering efforts across CyberArk and/or HashiCorp Vault environments * Develop CPM plugins and integrations to manage credentials across various platforms and applications * Assist in onboarding accounts into the vault and enabling password rotation via CPM * Build automation scripts (PowerShell / Python) to: * Retrieve credentials programmatically * Enable credential rotation workflows * Partner with internal teams to improve PAM adoption and user experience * Contribute to solution design for regulatory and compliance-driven initiatives * Help enhance PAM maturity by introducing automation and scalable engineering practices Primary Focus Areas * CyberArk Central Password Manager (CPM) and plugin development * Account onboarding, vaulting, and credential lifecycle management * Automation using scripting (PowerShell required, Python preferred) * Exposure to broader CyberArk suite (PVWA, PSM, etc.) * Optional exposure to: * CyberArk Alero (vendor remote access) * Dynamic Privileged Access (DPA) Required Qualifications * 2+ years of hands-on experience with CyberArk OR HashiCorp Vault * Candidates with HashiCorp Vault + some CyberArk exposure are strongly encouraged * Experience working in enterprise environments (large-scale, regulated, or highly structured) * Basic understanding of privileged access management (PAM) concepts * Experience with scripting for automation: * PowerShell required * Python or similar scripting languages preferred * Familiarity with: * Credential/Secrets Management * Windows environments and infrastructure * Strong problem-solving skills and ability to work independently Preferred Qualifications * Exposure to CyberArk components such as: * CPM, PVWA, PSM * Experience integrating PAM tools with: * Active Directory / LDAP * Databases (SQL Server, Oracle, etc.) * Familiarity with Agile / DevOps environments * Experience working in financial services or other regulated industries * Knowledge of tools like Jira / Confluence Nice to Have * CyberArk Alero or vendor remote access tools * Exposure to Dynamic Privileged Access (DPA) * CyberArk certifications Environment & Future State * CyberArk EPV (on-prem) + HashiCorp Vault (cloud) * Movement toward automation-first PAM strategy * Exploration of future SaaS-based or modern PAM solutions * Long-term vision includes AI-enabled vault interaction and improved access workflows Contract Details * Long-term contract (12-24 months) with potential for conversion * High-impact role supporting enterprise PAM transformation initiatives Job Type & Location This is a Contract to Hire position based out of Irving, TX. Pay and BenefitsThe pay range for this position is $53.60 - $55.00/hr. Eligibility requirements apply to some benefits and may depend on your job classification and length of employment. Benefits are subject to change and may be subject to specific elections, plan, or program terms. If eligible, the benefits available for this temporary role may include the following: * Medical, dental & vision * Critical Illness, Accident, and Hospital * 401(k) Retirement Plan - Pre-tax and Roth post-tax contributions available * Life Insurance (Voluntary Life & AD&D for the employee and dependents) * Short and long-term disability * Health Spending Account (HSA) * Transportation benefits * Employee Assistance Program * Time Off/Leave (PTO, Vacation or Sick Leave) Workplace TypeThis is a hybrid position in Irving,TX. Application DeadlineThis position is anticipated to close on Jun 2, 2026. About TEKsystems We're partners in transformation. We help clients activate ideas and solutions to take advantage of a new world of opportunity. We are a team of 80,000 strong, working with over 6,000 clients, including 80% of the Fortune 500, across North America, Europe and Asia. As an industry leader in Full-Stack Technology Services, Talent Services, and real-world application, we work with progressive leaders to drive change. That's the power of true partnership. TEKsystems is an Allegis Group company. The company is an equal opportunity employer and will consider all applications without regards to race, sex, age, color, religion, national origin, veteran status, disability, sexual orientation, gender identity, genetic information or any characteristic protected by law. About TEKsystems and TEKsystems Global Services We're a leading provider of business and technology services. We accelerate business transformation for our customers. Our expertise in strategy, design, execution and operations unlocks business value through a range of solutions. We're a team of 80,000 strong, working with over 6,000 customers, including 80% of the Fortune 500 across North America, Europe and Asia, who partner with us for our scale, full-stack capabilities and speed. We're strategic thinkers, hands-on collaborators, helping customers capitalize on change and master the momentum of technology. We're building tomorrow by delivering business outcomes and making positive impacts in our global communities. TEKsystems and TEKsystems Global Services are Allegis Group companies. Learn more at TEKsystems.com. The company is an equal opportunity employer and will consider all applications without regard to race, sex, age, color, religion, national origin, veteran status, disability, sexual orientation, gender identity, genetic information or any characteristic protected by law. San Francisco Fair Chance Ordinance: Pursuant to the San Francisco Fair Chance Ordinance, for all positions located in the city and county of San Francisco, we will consider for employment qualified applicants with arrest and conviction records. Massachusetts Lie Detector: It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability. Use of Artificial Intelligence (AI): We may use Artificial Intelligence (AI) to support parts of our hiring process, including sourcing, screening, and evaluating candidates. AI helps assess applications and qualifications, but final decisions are made by our hiring team. By applying, you acknowledge and agree that your application may be reviewed using AI tools.