{"id":1332952,"url":"https://alion.io/job/verisign-pam-engineer-beyondtrust","title":"PAM Engineer - BeyondTrust","company":{"id":1753436,"name":"VERISIGN","domain":"verisign.com","url":"https://alion.io/company/verisign-com","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"B","score":75,"open_postings":4,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":null,"computed_at":"2026-09-30T05:45:00Z"}},"role":"Industrial Engineering","role_family":"Industrial Engineering","seniority":"senior","employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Reston, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":135800,"max":183800,"currency":"USD","period":"year","gross":null,"usd_annual":183800},"salary_estimate":null,"experience_years_min":8,"visa_sponsorship":false,"relocation_package":false,"has_equity":true,"technologies":[{"name":"BeyondTrust","optional":false},{"name":"DNS","optional":false},{"name":"IAM","optional":false},{"name":"Least Privilege","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"Rest API","optional":false},{"name":"Zero Trust","optional":false}],"status":"live","first_seen_at":"2026-09-08T12:23:15Z","employer_posted_date":"2026-09-08","last_verified_at":"2026-10-01T03:02:27Z","board_verified":true,"closed_at":null,"days_open":22,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":22},"description":"Verisign helps enable the security, stability, and resiliency of the internet. We are a trusted provider of internet infrastructure services for the networked world and deliver unmatched performance in domain name system (DNS) services. \nWe are a mission focused, values driven company where each individual can contribute to building a stronger, more secure internet. We offer a dynamic and flexible work environment with competitive benefits and the ability to grow your career.\nVerisign is seeking an experienced Privileged Access Management (PAM) Engineer to design, implement, administer, and enhance enterprise privileged access and identity security solutions. This hands-on technical role will focus on PAM engineering, Microsoft Entra ID administration, automation, application integrations, and operational support.\nThe ideal candidate has deep experience with enterprise PAM technologies such as BeyondTrust, strong Microsoft Entra ID expertise, and a solid understanding of IAM, identity governance, authentication, and access security. This individual will partner with security, infrastructure, application, and architecture teams to deliver secure, scalable, and reliable identity solutions.\nResponsibilities\nDesign, implement, configure, administer, and maintain enterprise PAM solutions, in BeyondTrust\nAdminister and enhance Microsoft Entra ID, including enterprise applications, authentication, Conditional Access, role-based access control (RBAC), Privileged Identity Management (PIM), MFA, and SSO\nOnboard applications, privileged accounts, service accounts, and other identities into PAM platforms\nConfigure and maintain privileged account policies, credential management, password rotation, session management, and access controls\nIntegrate PAM solutions with enterprise applications, directories, identity platforms, and infrastructure\nEngineer and support integrations across PAM, IAM, IGA, MFA, and SSO technologies\nDevelop scripts and automation to streamline account onboarding, provisioning, testing, monitoring, and other identity-related processes\nImplement automated testing and validation where appropriate to improve reliability and deployment efficiency\nSupport privileged access reviews, access certifications, and remediation activities to meet security, audit, and compliance requirements\nPartner with security architects and engineering teams to develop technical designs and implement security controls based on least privilege and Zero Trust principles\nEvaluate new PAM and identity technologies and recommend improvements that strengthen security and operational efficiency\nDevelop and maintain technical documentation, including system configurations, architecture diagrams, integration designs, operational procedures, and troubleshooting guides\nParticipate throughout the solution lifecycle, including design, development, testing, deployment, production support, upgrades, and ongoing maintenance\nQualifications\nBachelor's degree in Computer Science, Engineering, Information Technology, Cybersecurity, or a related field, or equivalent experience\n8+ years of experience in PAM, IAM, identity security, security engineering, or related technologies\n2+ years of hands-on experience implementing and administering enterprise PAM platforms in BeyondTrust\nExperience administering Microsoft Entra ID in an enterprise environment\nExperience with Entra ID capabilities including Conditional Access, RBAC, PIM, MFA, SSO, enterprise applications, and identity/access management\nStrong understanding of PAM concepts, including privileged account management, credential vaulting, password rotation, session management, least privilege, and privileged access controls\nExperience integrating PAM solutions with directories, applications, servers, cloud platforms, and other enterprise technologies\nExperience with scripting and automation using technologies such as PowerShell, Python, REST APIs, or similar tools\nStrong understanding of authentication, authorization, identity lifecycle management, and security best practices\nExperience supporting audit and compliance requirements, including Sarbanes-Oxley (SOX) controls, preferably in a high-tech environment\nThis position is based in our Reston, VA office and offers a hybrid work schedule.\nThe pay range is $135,800 - $183,800.\nThe anticipated annual base salary range for this position is noted above, however, base pay offered may vary depending on job-related knowledge, skills, experience. Verisign offers a discretionary bonus which is based on individual and company performance, and certain roles may be eligible for discretionary stock awards.\nVerisign is an equal opportunity employer. That means we recruit, hire, compensate, train, promote, transfer, and administer all terms and conditions of employment without regard to their race, color, religion, national origin, sex, sexual orientation, gender identity, age, protected veteran status, disability, or other protected categories under applicable law.\nAdditional Information:\nOur Careers Page\nOur Benefits Summary\nVerisign in the Community\nOur EEO Statement\nOur Privacy Notice for Job Applicants/Candidates\nReasonable Accommodations\nStaffing agency policy: No fees will be paid for unsolicited resumes submitted to Verisign or our employees by third parties.","description_format":"text","description_chars":5314,"description_truncated":false,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Flexible schedule","Hybrid work"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Domain Registrars & Registries","DNS Services"],"lifecycle":[{"event":"open","at":"2026-09-27T13:16:52Z"}],"liveness":{"score":53,"band":"ok","label":"Likely open","p_open":1,"p_active":0.702,"p_room":0.75,"age_days":21,"expected_fill_days":23,"reasons":["conf:9","velocity","win:late"],"computed_at":"2026-09-30T05:45:00Z"},"pay":{"stated_usd_annual":183800,"is_top_pay":true},"html_url":"https://alion.io/job/verisign-pam-engineer-beyondtrust","json_url":"https://alion.io/job/verisign-pam-engineer-beyondtrust.json","meta":{"generated_at":"2026-10-01T04:36:28Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","usage":{"tier":"crawler","counted_by":"address","units_charged":1,"used_today":4033,"day_limit":5000,"remaining_today":967,"minute_limit":60,"resets_at":"2026-10-02T00:00:00Z"}}}