Privileged Access Management (PAM) Engineer
The Impact You’ll Make in this Role
As a Privileged Access Management (PAM) Engineer, you will focus on secrets management, non-human identity (NHI) management, and advanced integration capabilities within our privileged access management ecosystem as we implement innovative capacities for the enterprise. Here, you will make an impact by:
- Design and implement enterprise secrets management solutions using CyberArk Conjur and AAM
- Manage privileged access for service accounts, API keys, and certificates
- Build custom applications and tools for PAM automation
- Develop APIs and microservices for secrets management
- Integrate secrets management into CI/CD pipelines and DevSecOps workflows
- Implement automated credential rotation for applications and services
- Support containerized and cloud-native application security
- Create SDK integrations and Infrastructure as Code (IaC) for PAM resources
Your Skills and Expertise
To set you up for success in this role from day one, 3M requires (at a minimum) the following qualifications:
- High School Diploma (verified and completed prior to start) and 8 years of experience in Information Technology, Computer Science, Software Development, or DevOps in a private, public, government, or military environment.
- Bachelor's degree or higher (verified and completed prior to start) AND Six (6) years of experience in Information Technology, Computer Science, Software Development, or DevOps, in a private, public, government, or military environment.
Additional qualifications that could help you succeed even further in this role include:
- Programming proficiency (Java, C#, Python, Go, or similar)
- Experience with CyberArk Conjur, AAM, or similar secrets management tools Understanding of containerization (Docker, Kubernetes)
- CyberArk Conjur certification
- Cloud platform certifications (AWS, Azure, GCP)
- Experience with HashiCorp Vault or similar tools
- DevSecOps or secure development certifications
- Kubernetes security certifications (CKS)
- Software development and API integration
- Secrets management and credential lifecycle automation
- Cloud-native security patterns and container orchestration
- DevSecOps practices and secure coding
- Machine-to-machine authentication frameworks
Work location:
- On-site in Maplewood, MN, or Austin, TX office at least 4 days per week
Please note: your application may not be considered if you do not provide your education and work history, either by: 1) uploading a resume, or 2) entering the information into the application fields directly.
Please access the linked document by clicking select the country where you are applying for employment, and review. Before submitting your application, you will be asked to confirm your agreement with the terms.