Privileged Access Management Engineer

Main Responsibilities:

• Define, own, and maintain the PAM architecture aligned with enterprise security strategy and Zero Trust principles
• Design and drive PAM roadmaps, standards, and onboarding models
• Lead PAM deployments and onboarding of: Privileged domain and directory accounts Service and application accounts Local administrator and infrastructure accounts DevOps and automation identities
• Design and configure PAM capabilities, including: Credential vaulting and automatic password rotation Privileged session brokering and recording Just-in-Time (JIT) privileged access Secrets management
• Ensure effective integration with IAM platforms, SIEM solutions, directory services, and cloud environments
• Own PAM tiering models, including Tier 0 protections
• Define and enforce PAM policies, procedures, and control frameworks
• Support audits, regulatory inspections, and internal controls testing
• Lead risk assessments related to privileged access and remediation activities
• Establish operational models, runbooks, SOPs, and service KPIs
• Support incident response related to privileged access compromise
• Act as a technical advisor to security leadership and key stakeholders
• Provide training, guidance, and knowledge transfer to internal teams
• Support vendor selection, evaluation, and platform optimisation

Qualifications and Experience:

• Proven experience as a PAM Engineer, Architect, or Subject Matter Expert in large or complex environments
• Strong hands-on expertise with at least one enterprise PAM solution, such as: CyberArk, Delinea, BeyondTrust, One Identity, or HashiCorp Vault
• Solid experience integrating PAM with: Active Directory / Entra ID Windows, Linux, and Unix environments
• Good understanding of: Identity and access security controls Networking, certificates, and authentication mechanisms SIEM integration and security alerting
• Experience designing and enforcing Tier 0 / Tier 1 identity security controls
• Background working in regulated industries (e.g. finance, healthcare, life sciences, manufacturing)
• Strong communication skills with the ability to translate technical security concepts into business risk
• Structured, autonomous, and delivery-focused mindset
• Relevant security certifications (CISSP, CISM, CCSP, or vendor-specific certifications) are a plus