Morgan Stanley
Lead Privilege Access Management Engineer
$135K–$195K
Boston, Massachusetts · On-site · Full-time · Posted Oct 22, 2026
- Experience
- 12+ years; posting also says typically 12+ years in PAM engineering within complex, global settings.
About the job
Leads the engineering, integration, and operation of enterprise Privilege Access Management solutions and authentication controls across human and non-human identities.
What you'll do
- Design, integrate, deploy, and operate PAM platforms and endpoint privilege controls across cloud and hybrid environments.
- Automate and improve reliability, resilience, security, and governance of PAM services; assess risks and implement remediation.
- Translate designs into delivery plans and documentation, and partner with teams on adoption, on-call support, and incident reviews.
What they ask for
- 12+ years of cybersecurity engineering experience, including hands-on PAM engineering and production delivery.
- Deep enterprise authentication expertise, including OIDC/OAuth2, SAML, SSO, FIDO2/WebAuthn, PKI, API authentication, and Unix/Linux authentication.
- Experience deploying PAM, cloud PAM, and Endpoint Privilege Management in cloud and hybrid environments, including Azure or GCP.
- Experience with PAM/IAM platforms and integrations, automation, resiliency, and security compliance controls.
Pay
135,000–195,000 per year (USD, base salary)
Tools
CyberArk, HashiCorp Vault, Entra ID, Ping Identity, SailPoint, Terraform, Ansible, Python
AI focus
Includes secrets and access controls for agentic systems; no other AI work is specified.
Model-written summary · the original posting is authoritative