SecurityDevOps/Cloud
PAM
Also written as Privileged Access Management, CyberArk, Just-in-Time Access
Controls around the most powerful accounts in a company, such as admins, root logins and database superusers. It covers vaulting their passwords, granting access only when it's needed, and recording what was done with it.
Think of it like
The master key to the building is kept in a safe, signed out for one job, and returned with a note of which doors were opened.
Junior or senior?
An enterprise security specialty, often tied to CyberArk.
Senior sounds like
Has cut standing admin access down to access granted per request, and dealt with the friction that caused engineers.
Ask them
“How did engineers get admin access in your environment, and how did you reduce the number of people who had it permanently?”