Senior Privileged Access Management (PAM) Engineer

Description

The company's Enterprise Identity & Data Security team is looking for a senior engineer to strengthen privileged access management across the bank.

You will build, run and keep improving the controls that guard privileged accounts, admin access and critical systems across the technology estate, working with infrastructure, cloud, security and application teams to lower privileged access risk using current PAM methods, automation and Zero Trust principles.

Responsibilities

• Build and run privileged access controls in both on-premises and cloud environments
• Operate PAM tools for credential vaulting, password rotation, session management and privileged session recording
• Bring privileged accounts, systems, applications and service accounts into the PAM platform
• Help roll out least-privilege, Just-In-Time (JIT) and Zero Trust access models
• Write PowerShell scripts and use APIs to automate PAM processes and integrations
• Support monitoring, reporting, audits and governance work

Requirements

• 7-10 years of experience in Privileged Access Management, Identity & Access Management or cyber security engineering
• Hands-on work with enterprise PAM products
• A solid grasp of privileged access risk, account lifecycle management and security good practice
• Experience securing Windows, Linux, cloud platforms, databases and network devices
• Working knowledge of Active Directory, Entra ID and Azure
• Scripting and automation experience with PowerShell and APIs
• Experience in regulated environments, preferably financial services
• Practical experience with leading PAM technologies and an understanding of how they fit into a wider security strategy
• Strong analytical and problem-solving skills
• Clear communication with technical and non-technical stakeholders, and the ability to turn business and security needs into workable solutions
• A structured, proactive, delivery-focused approach with a drive for continuous improvement
• Experience with Delinea Secret Server or other Delinea PAM solutions: a strong advantage
• Experience with CyberArk, BeyondTrust, One Identity or similar PAM platforms: highly valued, especially in enterprise-scale environments

Conditions

The team is part of an international organisation with about 2,500 staff across 11 countries

The company values diversity and inclusion.

Benefits

• Investment in your learning and development, with a clear career path from your first day
• An open feedback culture and supportive teams