Privileged Access Management System Engineer

WHY UT SOUTHWESTERN?
With over 75 years of excellence in Dallas-Fort Worth, Texas, UT Southwestern is committed to excellence, innovation, teamwork, and compassion. As a world-renowned medical and research center, we strive to provide the best possible care, resources, and benefits for our valued employees. Ranked as the number 1 hospital in Dallas-Fort Worth according to U.S. News & World Report, we invest in you with opportunities for career growth and development to align with your future goals. Our highly competitive benefits package offers healthcare, PTO and paid holidays, on-site childcare, wage, merit increases and so much more. We invite you to be a part of the UT Southwestern team where you'll discover a culture of teamwork, professionalism, and a rewarding career!

JOB SUMMARY
This position is responsible for designing, implementing, and maintaining privileged access security controls across UTSW's on-premises and cloud environments. This role ensures the protection of high-risk accounts and credentials by deploying enterprise-grade Privileged Access Management (PAM) solutions, integrating with identity platforms, and enforcing least-privilege principles. The engineer will lead technical onboarding of privileged accounts, automate credential rotation, and implement session monitoring to reduce operational risk. Collaboration with Information Security, Infrastructure, and Application teams is essential to align PAM capabilities with UTSW's IAM roadmap, regulatory compliance (HIPAA, NIST), and audit requirements. This is NOT a 100% remote position, but it is eligible for a hybrid work schedule.

BENEFITS
UT Southwestern is proud to offer a competitive and comprehensive benefits package to eligible employees. Our benefits are designed to support your overall wellbeing, and include:

• PPO medical plan, available day one at no cost for full-time employee-only coverage
• 100% coverage for preventive healthcare-no copay
• Paid Time Off, available day one
• Retirement Programs through the Teacher Retirement System of Texas (TRS)
• Paid Parental Leave Benefit
• Wellness programs
• Tuition Reimbursement
• Public Service Loan Forgiveness (PSLF) Qualified Employer
• Learn more about these and other UTSW employee benefits!

EXPERIENCE AND EDUCATION

Required

• Education
  Bachelor's Degree with major coursework in computer science, math, information systems or other related field.
  

• Experience
  5 years of experience in field directly related to operating systems and systems administration, including experience working with and maintaining IGA or PAM tools.
  Experience with project management phases and methodologies, as it relates to assigned projects and tasks.
  An equivalent combination of education and/or directly related experience may be substituted in lieu of the stated requirements.
  

Preferred

• Licenses and Certifications
  CISSP, Microsoft Certified: Identity & Access Administrator, CyberArk Guardian/Sentry, or equivalent.
  

JOB DUTIES

• Deploy and maintain PAM platforms (CyberArk, BeyondTrust, Microsoft Entra ID PIM).
• Integrate PAM with Active Directory, MFA (Duo), and cloud services.
• Onboard privileged accounts, automate credential rotation, and manage sessions.
• Define PAM policies, standards, and operational runbooks.
• Monitor KPIs and provide audit evidence for HIPAA/NIST compliance.
• Support incident response for privileged account misuse or compromise.
• Responsible for developing documentation relative to assigned projects and tasks including documentation related to system testing, disaster recovery and routine system administration processes.
• Performs other duties as assigned.

SECURITY AND EEO STATEMENT

Security
This position is security-sensitive and subject to Texas Education Code 51.215, which authorizes UT Southwestern to obtain criminal history record information. To the extent this position requires the holder to research, work on, or have access to critical infrastructure as defined in Section 117.001(2) of the Texas Business and Commerce Code, the ability to maintain the security or integrity of the critical infrastructure is a minimum qualification to be hired and to continue to be employed in the position.

EEO
UT Southwestern Medical Center is committed to an educational and working environment that provides equal opportunity to all members of the University community. As an equal opportunity employer, UT Southwestern prohibits unlawful discrimination, including discrimination on the basis of race, color, religion, national origin, sex, sexual orientation, gender identity, gender expression, age, disability, genetic information, citizenship status, or veteran status.

WHY UT SOUTHWESTERN?
With over 75 years of excellence in Dallas-Fort Worth, Texas, UT Southwestern is committed to excellence, innovation, teamwork, and compassion. As a world-renowned medical and research center, we strive to provide the best possible care, resources, and benefits for our valued employees. Ranked as the number 1 hospital in Dallas-Fort Worth according to U.S. News & World Report, we invest in you with opportunities for career growth and development to align with your future goals. Our highly competitive benefits package offers healthcare, PTO and paid holidays, on-site childcare, wage, merit increases and so much more. We invite you to be a part of the UT Southwestern team where you'll discover a culture of teamwork, professionalism, and a rewarding career!

JOB SUMMARY
This position is responsible for designing, implementing, and maintaining privileged access security controls across UTSW's on-premises and cloud environments. This role ensures the protection of high-risk accounts and credentials by deploying enterprise-grade Privileged Access Management (PAM) solutions, integrating with identity platforms, and enforcing least-privilege principles. The engineer will lead technical onboarding of privileged accounts, automate credential rotation, and implement session monitoring to reduce operational risk. Collaboration with Information Security, Infrastructure, and Application teams is essential to align PAM capabilities with UTSW's IAM roadmap, regulatory compliance (HIPAA, NIST), and audit requirements. This is NOT a 100% remote position, but it is eligible for a hybrid work schedule.

BENEFITS
UT Southwestern is proud to offer a competitive and comprehensive benefits package to eligible employees. Our benefits are designed to support your overall wellbeing, and include:

• PPO medical plan, available day one at no cost for full-time employee-only coverage
• 100% coverage for preventive healthcare-no copay
• Paid Time Off, available day one
• Retirement Programs through the Teacher Retirement System of Texas (TRS)
• Paid Parental Leave Benefit
• Wellness programs
• Tuition Reimbursement
• Public Service Loan Forgiveness (PSLF) Qualified Employer
• Learn more about these and other UTSW employee benefits!

EXPERIENCE AND EDUCATION

Required

• Education
  Bachelor's Degree with major coursework in computer science, math, information systems or other related field.
  

• Experience
  5 years of experience in field directly related to operating systems and systems administration, including experience working with and maintaining IGA or PAM tools.
  Experience with project management phases and methodologies, as it relates to assigned projects and tasks.
  An equivalent combination of education and/or directly related experience may be substituted in lieu of the stated requirements.
  

Preferred

• Licenses and Certifications
  CISSP, Microsoft Certified: Identity & Access Administrator, CyberArk Guardian/Sentry, or equivalent.
  

JOB DUTIES

• Deploy and maintain PAM platforms (CyberArk, BeyondTrust, Microsoft Entra ID PIM).
• Integrate PAM with Active Directory, MFA (Duo), and cloud services.
• Onboard privileged accounts, automate credential rotation, and manage sessions.
• Define PAM policies, standards, and operational runbooks.
• Monitor KPIs and provide audit evidence for HIPAA/NIST compliance.
• Support incident response for privileged account misuse or compromise.
• Responsible for developing documentation relative to assigned projects and tasks including documentation related to system testing, disaster recovery and routine system administration processes.
• Performs other duties as assigned.

SECURITY AND EEO STATEMENT

Security
This position is security-sensitive and subject to Texas Education Code 51.215, which authorizes UT Southwestern to obtain criminal history record information. To the extent this position requires the holder to research, work on, or have access to critical infrastructure as defined in Section 117.001(2) of the Texas Business and Commerce Code, the ability to maintain the security or integrity of the critical infrastructure is a minimum qualification to be hired and to continue to be employed in the position.

EEO
UT Southwestern Medical Center is committed to an educational and working environment that provides equal opportunity to all members of the University community. As an equal opportunity employer, UT Southwestern prohibits unlawful discrimination, including discrimination on the basis of race, color, religion, national origin, sex, sexual orientation, gender identity, gender expression, age, disability, genetic information, citizenship status, or veteran status.

5323 Harry Hines Blvd (5323H)
5323 Harry Hines Blvd
Dallas, 75390