--- title: 'PAM Engineer - BeyondTrust at Verisign' canonical: 'https://feeny.ai/job/pam-engineer-beyondtrust-verisign-reston-8qwb7dvrfcjj' type: 'job' last_seen: '2026-09-10' --- # PAM Engineer - BeyondTrust at Verisign - **Company:** Verisign - **Location:** Reston, VA - **Posted:** 2026-09-08 - **Last confirmed live:** 2026-09-10 - **Apply:** https://job-boards.greenhouse.io/verisign/jobs/7979431003 ## Job description Verisign helps enable the security, stability, and resiliency of the internet. We are a trusted provider of internet infrastructure services for the networked world and deliver unmatched performance in domain name system (DNS) services. We are a mission focused, values driven company where each individual can contribute to building a stronger, more secure internet.  We offer a dynamic and flexible work environment with competitive benefits and the ability to grow your career. Verisign is seeking an experienced Privileged Access Management (PAM) Engineer to design, implement, administer, and enhance enterprise privileged access and identity security solutions. This hands-on technical role will focus on PAM engineering, Microsoft Entra ID administration, automation, application integrations, and operational support. The ideal candidate has deep experience with enterprise PAM technologies such as BeyondTrust, strong Microsoft Entra ID expertise, and a solid understanding of IAM, identity governance, authentication, and access security. This individual will partner with security, infrastructure, application, and architecture teams to deliver secure, scalable, and reliable identity solutions. ## Responsibilities - Design, implement, configure, administer, and maintain enterprise PAM solutions, in BeyondTrust - Administer and enhance Microsoft Entra ID, including enterprise applications, authentication, Conditional Access, role-based access control (RBAC), Privileged Identity Management (PIM), MFA, and SSO - Onboard applications, privileged accounts, service accounts, and other identities into PAM platforms - Configure and maintain privileged account policies, credential management, password rotation, session management, and access controls - Integrate PAM solutions with enterprise applications, directories, identity platforms, and infrastructure - Engineer and support integrations across PAM, IAM, IGA, MFA, and SSO technologies - Develop scripts and automation to streamline account onboarding, provisioning, testing, monitoring, and other identity-related processes - Implement automated testing and validation where appropriate to improve reliability and deployment efficiency - Support privileged access reviews, access certifications, and remediation activities to meet security, audit, and compliance requirements - Partner with security architects and engineering teams to develop technical designs and implement security controls based on least privilege and Zero Trust principles - Evaluate new PAM and identity technologies and recommend improvements that strengthen security and operational efficiency - Develop and maintain technical documentation, including system configurations, architecture diagrams, integration designs, operational procedures, and troubleshooting guides - Participate throughout the solution lifecycle, including design, development, testing, deployment, production support, upgrades, and ongoing maintenance ## Qualifications - Bachelor's degree in Computer Science, Engineering, Information Technology, Cybersecurity, or a related field, or equivalent experience - 8+ years of experience in PAM, IAM, identity security, security engineering, or related technologies - 2+ years of hands-on experience implementing and administering enterprise PAM platforms in BeyondTrust - Experience administering Microsoft Entra ID in an enterprise environment - Experience with Entra ID capabilities including Conditional Access, RBAC, PIM, MFA, SSO, enterprise applications, and identity/access management - Strong understanding of PAM concepts, including privileged account management, credential vaulting, password rotation, session management, least privilege, and privileged access controls - Experience integrating PAM solutions with directories, applications, servers, cloud platforms, and other enterprise technologies - Experience with scripting and automation using technologies such as PowerShell, Python, REST APIs, or similar tools - Strong understanding of authentication, authorization, identity lifecycle management, and security best practices - Experience supporting audit and compliance requirements, including Sarbanes-Oxley (SOX) controls, preferably in a high-tech environment This position is based in our Reston, VA office and offers a hybrid work schedule. The pay range is $135,800 - $183,800. The anticipated annual base salary range for this position is noted above, however, base pay offered may vary depending on job-related knowledge, skills, experience. Verisign offers a discretionary bonus which is based on individual and company performance, and certain roles may be eligible for discretionary stock awards. Verisign is an equal opportunity employer. That means we recruit, hire, compensate, train, promote, transfer, and administer all terms and conditions of employment without regard to their race, color, religion, national origin, sex, sexual orientation, gender identity, age, protected veteran status, disability, or other protected categories under applicable law. Additional Information: [Our Careers Page](https://www.verisign.com/en_US/company-information/verisign-careers/index.xhtml?dmn=verisign.careers) [Our Benefits Summary](https://www.verisign.com/careers/benefits/) [Verisign in the Community](https://www.verisign.com/about-us/verisign-cares/) [Our EEO Statement](https://www.verisign.com/assets/Equal-Employment-Opportunity.pdf) [Our Privacy Notice for Job Applicants/Candidates](https://www.verisign.com/legal-center/privacy/privacy-job-applicants/) [Reasonable Accommodations](https://www.verisign.com/en_US/company-information/verisign-careers/index.xhtml?loc=en_US#:~:text=Reasonable%20Accommodations%20for%20Those%20With%20Disabilities) Staffing agency policy: No fees will be paid for unsolicited resumes submitted to Verisign or our employees by third parties. ## About Verisign ## Core Business - Primary industry/industries: Internet infrastructure, domain name registry services, DNS security and stability - Target customers: ICANN-accredited registrars (B2B), the global internet community (indirectly B2C through domain registrations) - Mission or purpose statement: "Verisign enables the world to connect online with reliability and confidence – anytime, anywhere." ## Products & Services - **.com and .net Registry Services**: Authoritative resolution and registration for the two largest top-level domains, supporting the majority of global e-commerce. - **Root Zone Maintainer**: Operates two of the 13 global internet root servers and provides root zone maintainer services for the DNS. - **DNS Security & Stability**: Proprietary infrastructure and tools to protect the Domain Name System from cyber threats, with uninterrupted resolution since 1997. - **Data & Insights**: Publishes data about .com and .net zone trends and contributes to internet standards development. ## Market Standing - **Valuation/Market Cap**: Public company (NYSE: VRSN) – current market cap not disclosed in provided sources. - **Key Metric**: Annual Revenue – not publicly available in provided sources. (Public financials can be found in SEC filings.) - **Notable Investors/Partners**: U.S. Department of Commerce (Cooperative Agreement for .com), Internet Corporation for Assigned Names and Numbers (ICANN), approximately 3,000 ICANN-accredited registrars worldwide. - **Growth Signals**: Manages relationships with ~3,000 registrars who typically submit over 100 million domain name transactions daily; operates two of the 13 global root servers; continues to invest in DNS infrastructure to meet growing global internet engagement. ## Competitive Advantages - **Uninterrupted service**: Provided resolution for .com and .net without interruption since 1997. - **Proprietary infrastructure**: Custom-built DNS registration infrastructure and toolset designed for high dependability in an evolving cyber threat environment. - **Content neutrality obligation**: Under the Cooperative Agreement with the U.S. Department of Commerce, .com registry must remain content neutral – a unique obligation that ensures equal access. - **Root zone stewardship**: As root zone maintainer and operator of two root servers, Verisign holds a critical, irreplaceable role in the global DNS. - **Scale and trust**: Billions of people and a significant portion of the world’s economy rely on the infrastructure Verisign helps manage. ## Strategic Focus - **Infrastructure investment**: Committed to investing in DNS infrastructure to meet ever-growing demand as global internet engagement continues to rise. - **Security leadership**: Working with government regulators, ICANN, industry groups, and law enforcement to combat DNS-related security threats and illegal activity. - **Community collaboration**: Actively contributes to policy development and internet standards, sharing expertise through publicly available data on .com and .net zones. ## Why Work Here - **Mission-driven culture**: Employees help keep the internet secure, stable, and resilient – with impact felt globally. - **Diversity and inclusion**: Equal opportunity employer with active employee communities (APIC, BELIEVE, BienVenidos, Women in Technology, Young Professionals Group). - **Comprehensive benefits**: Medical, dental, vision, 401(k) with match, employee stock purchase plan, tuition reimbursement, parental bonding leave, volunteer hours, and more. - **Work environment**: Emphasis on work-life balance; onsite fitness center in Reston; telemedicine and family building support. - **Veteran-friendly**: Mission-focused and veteran-driven culture; many veterans thrive in the company’s purpose-oriented environment. - **Remote/hybrid policy**: Not explicitly stated in provided sources; likely office-based with flexibility (Reston HQ and international locations). ## Sources 1. [verisign.com - About Us](https://www.verisign.com/about-us/) 2. [verisign.com - Careers Overview](https://www.verisign.com/careers/) 3. [verisign.com - Our Culture](https://www.verisign.com/careers/our-culture/) 4. [verisign.com - Jobs](https://www.verisign.com/careers/jobs/) 5. [verisign.com - Employee Benefits](https://www.verisign.com/careers/benefits/) 6. [job-boards.greenhouse.io - Verisign Careers](https://job-boards.greenhouse.io/verisign) ## Other roles at Verisign - [Software Engineer - RUST](https://feeny.ai/job/software-engineer-rust-verisign-villars-sur-glane-th03qxg6aedf) — Villars-sur-Glâne, Switzerland - [Financial Analyst](https://feeny.ai/job/financial-analyst-verisign-reston-k0zz8s02wgma) — Reston, VA - [Product Management Director](https://feeny.ai/job/product-management-director-verisign-reston-pem01pn683xz) — Reston, VA - [Research Engineer](https://feeny.ai/job/research-engineer-verisign-reston-k0fceehptgcr) — Reston, VA - [Manager - Information Security Compliance](https://feeny.ai/job/manager-information-security-compliance-verisign-reston-82epns6xw5q7) — Reston, VA - [Sr Product Manager - Top-Level Domains (TLDs)](https://feeny.ai/job/sr-product-manager-top-level-domains-tlds-verisign-reston-rvv577t8x3t6) — Reston, VA - [Senior DDI Engineer](https://feeny.ai/job/senior-ddi-engineer-verisign-reston-vwxknq3xyr96) — Reston, VA - [Sr Research Engineer](https://feeny.ai/job/sr-research-engineer-verisign-reston-f2bnmcrr9rpm) — Reston, VA - [Product Management Director - Top-Level Domains](https://feeny.ai/job/product-management-director-top-level-domains-verisign-reston-g3g5hrd3rz0a) — Reston, VA - [Sr Product Marketing Manager](https://feeny.ai/job/sr-product-marketing-manager-verisign-reston-rkx2ppgsg911) — Reston, VA