**Description** **Introduction** Do you want to join an organization that invests in you as a Consulting PAM Security Engineer? At HCA Healthcare, you come first. HCA Healthcare has committed up to $300 million in programs to support our incredible team members over the course of three years. **Benefits** HCA Healthcare, offers a total rewards package that supports the health, life, career and retirement of our colleagues. The available plans and programs include: + Comprehensive medical coverage that covers many common services at no cost or for a low copay. Plans include prescription drug and behavioral health coverage as well as free telemedicine services and free AirMed medical transportation. + Additional options for dental and vision benefits, life and disability coverage, flexible spending accounts, supplemental health protection plans (accident, critical illness, hospital indemnity), auto and home insurance, identity theft protection, legal counseling, long-term care coverage, moving assistance, pet insurance and more. + Free counseling services and resources for emotional, physical and financial wellbeing + 401(k) Plan with a 100% match on 3% to 9% of pay (based on years of service) + Employee Stock Purchase Plan with 10% off HCA Healthcare stock + Family support through fertility and family building benefits with Progyny and adoption assistance. + Referral services for child, elder and pet care, home and auto repair, event planning and more + Consumer discounts through Abenity and Consumer Discounts + Retirement readiness, rollover assistance services and preferred banking partnerships + Education assistance (tuition, student loan, certification support, dependent scholarships) + Colleague recognition program + Time Away From Work Program (paid time off, paid family leave, long- and short-term disability coverage and leaves of absence) + Employee Health Assistance Fund that offers free employee-only coverage to full-time and part-time colleagues based on income. Learn more about Employee Benefits (https://careers.hcahealthcare.com/pages/employee-benefits-and-rewards) **_Note: Eligibility for benefits may vary by location._** You contribute to our success. Every role has an impact on our patients’ lives and you have the opportunity to make a difference. We are looking for a dedicated Consulting PAM Security Engineer like you to be a part of our team. **Job Summary and Qualifications** The Consulting PAM Security Engineer is primarily responsible for advanced operational support of large, complex, and distributed Identity Access Management (IAM) systems with a specific focus on Privileged Access Management (PAM). We seek a driven security professional to guide clients in securing their privileged accounts and data transfers. You will be the primary expert, specializing in accounts used for data transmission (such as SFTP and service accounts), with a strong focus on privileged identity management, password management, credential vaulting, and privileged account certification. This individual will work independently, and collaboratively, to build and maintain privileged access management solutions that meet organizational needs. They will demonstrate high self-motivation, excellent communication, documentation, and relationship-building skills. This position will interact with multiple groups and individuals including Security Architecture, Cloud Adoption and Operations, Enterprise Architecture, Development Architecture, Business Partners, Vendors, and Leadership. **Responsibilities** : + Provide expertise in evaluating Entra ID permissions and ensuring alignment with least privilege principles, integrating cloud-specific security concerns, and utilizing GCP Identity Platform when relevant. + Secure storage, rotation, and usage of privileged accounts: Scrutinize how accounts are secured, stored, and rotated, recommending improvements and adhering to least privilege principles. + HashiCorp Vault Solutions: Design and implement Vault solutions for securing credentials and access control, providing code examples and scripting assistance. + Collaborate with teams to implement secure credential storage solutions using HashiCorp Vault. + Configure and administer privilege access management solutions, including password vaults, session recording, multi-factor authentication, and least privilege technologies. + Collaborate with the team to design, implement, and audit privileged access workflows and cloud permission settings. + Create architectural and procedural documentation that outlines the principle of least privilege as it pertains to HCA’s cloud environments. + Execute changes according to HCA change management policies and processes for supported systems. + Provide mentorship and technical guidance to peers and junior staff + Develop and document technical requirements by working with business users and stakeholders. + Monitor and analyze PAM system logs and reports, proactively identifying and addressing any security risks or unusual activities. + Provide technical expertise and support to IT teams and end-users, troubleshooting and resolving PAM-related issues. **What qualifications you will need:** + Bachelor's degree in Information Systems + 7+ years of experience in Identity & Access Management and/or Information Technology **Licenses, Certifications, & Training:** + GCP Certification(s) + MS SC - 300 Microsoft Identity and Access Administrator + MS SC - 900 Security, Identity, and Compliance Fundamentals + CISSP **Knowledge, Skills, Abilities, Behaviors:** + Experience with Entra ID and Google Cloud Identity Platforms + Strong understanding of best practices in the use of REST-based APIs. + Experience with Entra ID or Google Cloud native architectures and Platform Services. + Experience in core IAM technologies (federation, directory services, MFA, etc.) + Expert knowledge of authentication methods, including multi-factor authentication and single sign-on. + Experience in Terraform, JSON, and YML or other Infrastructure as Code. + Knowledge and understanding of privilege access management principles and practices. + Advanced experience in on-prem and cloud-based access control, access management, access governance, and identity methodologies. + Advanced Understanding of Identity & Access Management concepts + User lifecycle management + Dependence of major integrated systems + Fully recognize the business or regulatory drivers behind IAM Role based access controls + Methods of systems integration – Federation, LDAP, IWA + Access control standards and best practices + Understanding of major PAM tools and services + Unique identification + Provisioning / De-provisioning + Password management + OAUTH, OPENID Connect, SAML + Access Management + Strong authentication + Multi-Factor Authentication + Expert knowledge of advanced information security concepts + Data protection + Cryptography services + Risk management + Incident response + Web application security + Network security + Policy and standards + Data classifications + Directory services + Vendor support engagement + Desktop and productivity tools (Excel) + Strong communication and collaboration skills, with the ability to work effectively in cross-functional teams and communicate technical concepts to non-technical stakeholders. + Detail-oriented and proactive, with a focus on ensuring the security and integrity of privileged accounts and systems. + Soft Skills + Effectively coordinate activities across groups + Strong written and verbal communication skills + Execute limited internal projects and initiatives with little to no oversight + Support projects and initiatives that span organizational boundaries + Implement or improve processes affecting multiple groups and/or organizations + Coordinate activities within the group + Self-Motivated + Independent worker + Customer focus – takes ownership of issues and seeing issues through to resolution + Effective communications + Critical thinking and problem-solving skills HCA Healthcare has been recognized as one of the World's Most Ethical Companies® by the Ethisphere Institute more than ten times. In recent years, HCA Healthcare spent an estimated $3.7 billion in cost for the delivery of charitable care, uninsured discounts, and other uncompensated expenses. "Good people beget good people."- Dr. Thomas Frist, Sr. HCA Healthcare Co-Founder We are a family 270,000 dedicated professionals! Our Talent Acquisition team is reviewing applications for our Consulting PAM Security Engineer opening. Qualified candidates will be contacted for interviews. **Submit your resume today to join our community of caring!** We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.