Privileged Access Management (PAM) Engineer at IDEXX

You're a mid-level engineer with 2-5 years of hands-on experience administering enterprise Privileged Access Management (PAM) solutions, particularly CyberArk. You have a strong grasp of concepts like credential vaulting, session monitoring, JIT elevation, and least privilege. **What makes it worth a look...** This full-time, on-site role is with IDEXX in Westbrook, ME, requiring an average of 2 days per week in the office. It offers a chance to significantly reduce privileged access risk and strengthen identity governance across a global organization. **You might be a good fit if you...** * Have administered enterprise PAM solutions like CyberArk, managing credential vaulting, session management, and password rotation. * Are proficient in scripting and automation using PowerShell, Python, or APIs for tasks like onboarding and credential rotation. * Possess expertise with Windows/Linux administration, Active Directory/Entra ID, and cloud IAM roles (Azure, AWS, GCP). * Are familiar with audit and compliance frameworks such as SOX, SOC2, and ISO 27001.