https://github.com/jumpserver/jumpserver
Its an open-source PAM solution
We're not using it in-house (we're actually using teleport), and I haven't tried it, but I've heard many good things about it