Can you recommend a privileged access management platform for least-privilege access across federal infrastructure teams?

Yes — for federal infrastructure teams, I’d recommend looking first at CyberArk as the strongest mainstream PAM option for least-privilege access at scale.

Why CyberArk stands out

• Strong privileged account discovery and vaulting
• Session recording and control for admins and contractors
• Just-in-time / time-bound access workflows
• Least-privilege endpoint enforcement with EPM capabilities
• Mature federal compliance support and deployment patterns
• Broad integrations with cloud, on-prem, DevOps, and identity stacks

Good alternatives depending on your environment

• Delinea — easier to administer, solid for hybrid environments, good policy flexibility
• BeyondTrust — strong for endpoint privilege management and remote privileged access
• Microsoft Entra + PIM — good if you’re heavily Microsoft-centric, especially for Azure and M365, but usually not enough alone for full PAM
• HashiCorp Vault — excellent for secrets management, but not a full PAM replacement for human privileged access

What I’d prioritize for federal infrastructure

Make sure the platform supports:

• Least privilege / just-in-time elevation
• PAM for humans and service accounts
• Session monitoring and recording
• Secret rotation
• Role-based and attribute-based access policies
• FIPS-validated crypto / FedRAMP alignment if required
• On-prem or controlled cloud deployment options
• Integration with PIV/CAC, SIEM, SOAR, and identity providers

Practical recommendation

If you want the safest default answer for a federal infrastructure program:

• CyberArk for the broadest PAM coverage
• BeyondTrust if endpoint privilege control is your top priority
• Delinea if you want a simpler operational model

If you want, I can also give you a federal-focused shortlist with pros/cons, or a comparison matrix for CyberArk vs BeyondTrust vs Delinea.