Who we are:

Makpar is a comprehensive professional and technical solutions provider for the Federal government. We combine functional and technical expertise in cloud engineering, data management, cybersecurity and emerging technologies to deliver mission success. We build the right IT solution for government clients by partnering with them to understand their WHAT, WHY, and HOW. Using our signature consulting methodology that we call “The Makpar Way,” we help agencies navigate the ongoing changes in the Federal technology landscape. We succeed where others fail because of our connected and engaged workforce are dedicated to delivering success for our clients and the American people.

Our Mission: We solve complex problems for the Federal government to accelerate access to citizen services.

When it comes to excellence, we deliver. Learn more about our employer brand at makpar.com/careers.

The PAM Engineer will support USCIS privileged access management modernization, CyberArk/vaulting, secrets management, privileged session controls, least privilege, Zero Trust, just-in-time access, privileged account discovery, and privileged access governance across cloud, hybrid, and on-prem environments.
This role requires hands-on privileged access experience, preferably with CyberArk and federal enterprise environments.

Key Responsibilities

• Implement and support NIST-aligned least privilege practices.
• Support Just-in-Time provisioning for privileged access.
• Support privileged session management, privilege elevation, delegation management, and lifecycle management.
• Support enterprise secrets management use cases and integration with back-end vault platforms.
• Discover, classify, manage, and govern privileged accounts across systems and applications.
• Identify owners and usage patterns for privileged human and non-human accounts.
• Implement RBAC and ABAC for privileged accounts.
• Support PIV-based SSO for privileged access to prevent credential exposure.
• Register applications for PAM across multiple environments.
• Randomize, manage, and vault passwords, keys, and other credentials for administrative, service, and application accounts.
• Broker credentials to applications, databases, services, network devices, operating systems, and other systems.
• Coordinate vulnerability remediation with security teams.
• Support STIG configurations and hardened container images.
• Monitor, record, audit, and analyze privileged sessions and actions.
• Develop security audit dashboards and support FISMA/compliance data pulls.
• Support Active Directory tiering and permission improvements.

Required Qualifications

• Experience implementing or operating PAM solutions.
• Experience with privileged accounts, privileged session management, secrets management, and credential vaulting.
• Experience with CyberArk or comparable PAM platform.
• Experience with least privilege, privileged account discovery, account ownership, and lifecycle governance.
• Ability to support cloud, hybrid, and on-prem privileged access use cases.
• Ability to obtain favorable EOD / suitability and maintain required USCIS access.
• U.S. citizenship likely required for DHS IT access unless waiver is granted — confirm before final posting.

Preferred Qualifications

• CyberArk PAS Vault experience.
• Experience supporting PAM adoption across many application teams.
• Experience with PIV SSO for privileged access.
• Experience with AD tiering, LDAP, CDM, STIGs, hardened containers, and FISMA dashboards.
• Experience supporting DevOps secrets management and container platform integrations.
• Prior DHS, USCIS, or federal Zero Trust/PAM experience.