Description
We are seeking an experienced Senior Privileged Identity Management (PIM) & Privileged Access Management (PAM) Engineer to design, implement, and support enterprise-class privileged access and identity security solutions.
The successful candidate will play a key role in strengthening the organisation’s Zero Trust security framework by securing privileged accounts, administrative access, service accounts, and critical infrastructure across on-premises, cloud, and hybrid environments.
The ideal candidate will have strong expertise in Microsoft Entra ID PIM, CyberArk, BeyondTrust, Delinea, Azure, AWS , and Identity & Access Management (IAM) technologies, with proven experience delivering PAM transformation and governance initiatives within large enterprise environments.
Key Responsibilities
- Privileged Access Management
- Design, implement, and administer enterprise PAM solutions.
- Secure privileged accounts, shared accounts, service accounts, and application credentials.
- Implement credential vaulting, password rotation, and session management controls.
- Configure privileged session monitoring, recording, and auditing capabilities.
- Develop and maintain PAM operational procedures and standards.
- Support PAM onboarding activities across infrastructure, applications, databases, and cloud platforms.
- Privileged Identity Management
- Implement and manage Microsoft Entra ID Privileged Identity Management (PIM).
- Configure: Just-in-Time (JIT) access Just-Enough Access (JEA) Role activation approval workflows Time-bound privileged access Access reviews Privileged role governance
- Implement Role-Based Access Control (RBAC) and Attribute-Based Access Control (ABAC) frameworks.
- Support identity lifecycle management and privileged access certification processes.
- Cloud Security (Azure & AWS)
- Secure privileged access across Microsoft Azure and AWS environments.
- Implement privileged access controls for: Azure subscriptions Azure Management Groups Microsoft Entra ID roles AWS IAM roles AWS Organizations AWS privileged accounts
- Integrate PAM controls within cloud-native and hybrid architectures.
- Support cloud security and Zero Trust initiatives.
- Identity & Access Management Integration
- Integrate PAM solutions with: Microsoft Entra ID Active Directory LDAP SailPoint Saviynt ServiceNow Okta Ping Identity
- Support Single Sign-On (SSO), Multi-Factor Authentication (MFA), and identity federation initiatives.
- Work closely with IAM and IGA teams on privileged access governance.
- Security Operations & Compliance
- Support audit and compliance activities related to privileged access controls.
- Perform privileged account reviews and access certification exercises.
- Investigate privileged access incidents and security events.
- Develop reporting and dashboards for privileged access metrics and compliance monitoring.
- Ensure alignment with Zero Trust and least-privilege security principles.
- Automation & Engineering
- Develop automation scripts for PAM provisioning and administration.
- Automate onboarding, password management, account discovery, and reporting processes.
- Integrate PAM solutions with ITSM and workflow platforms.
- Support Infrastructure as Code (IaC) and DevSecOps privileged access requirements.
Experience Required Skills & Experience
5-10+ years of experience in Identity & Access Management or Cyber Security.
3-5+ years of hands-on experience implementing and supporting PAM solutions.
Experience working in enterprise-scale environments with regulatory and compliance requirements.
Strong troubleshooting and operational support experience.
Technical Skills
- Microsoft Security Technologies
- Microsoft Entra ID Entra ID Privileged Identity Management (PIM) Conditional Access Azure RBAC Azure Management Groups Microsoft Defender Suite Microsoft Sentinel
- PAM Technologies Experience With One Or More Of CyberArk PAS CyberArk Privilege Cloud BeyondTrust PAM Delinea (Thycotic) ARCON PAM One Identity Safeguard HashiCorp Vault
- Cloud Platforms Microsoft Azure Azure Security Azure Identity Services Azure Key Vault Azure RBAC Azure Policy AWS AWS IAM AWS Organizations AWS Security Hub AWS IAM Identity Center AWS KMS
- Scripting & Automation PowerShell Python REST APIs ARM Templates Terraform
- Identity & Governance Active Directory LDAP Identity Governance Access Certification Segregation of Duties (SoD) Joiner-Mover-Leaver Processes
- Security Domain Knowledge Privileged Access Management (PAM) Identity Governance & Administration (IGA) Zero Trust Architecture RBAC & ABAC Identity Security Authentication & Authorisation Security Operations Risk & Compliance Access Governance
Preferred Certifications
- CyberArk Defender Certification
- CyberArk Sentry Certification
- Microsoft Certified: Identity and Access Administrator Associate (SC-300)
- Microsoft Certified: Cybersecurity Architect Expert (SC-100)
- CISSP
- CISM
- Certified PAM Professional (CPP)
- AWS Security Specialty
- Azure Security Engineer Associate (AZ-500)