PAM Engineer

Your Tasks

• Define and maintain the PAM architecture aligned with enterprise security strategy and Zero Trust principles.
• Develop and maintain PAM roadmaps, standards, and design patterns.
• Ensure PAM solutions integrate effectively with IAM, SIEM, directory services, and cloud platforms.
• Own PAM Tiering models and enforce Tier 0 protections.
• Lead PAM deployment
• Provide technical leadership for PAM upgrades, migrations, and platform consolidation.
• Develop PAM policies, procedures, and control frameworks.
• Ensure alignment with security standards (e.g. ISO 27001, NIST, CIS Controls, GMP / GxP where applicable).
• Support audits, internal controls testing, and regulatory inspections.
• Own risk assessments related to privileged access and remediation planning.
• Establish PAM operational models and procedures (runbooks and SOPs).
• Define service KPIs and performance metrics.
• Manage incident response activities involving privileged access compromise.
• Drive onboarding automation and self-service capabilities.
• Act as technical advisor to IT Security leadership and programme sponsors.
• Collaborate with application owners and infrastructure teams to onboard systems securely.
• Provide training, coaching, and knowledge transfer to operational teams.
• Support vendor management and product evaluations.

• Deep expertise with at least one enterprise PAM platform (e.g. Delinea, Cyber Ark, Beyond Trust, One Identity, Hashi Corp Vault).
• Strong Active Directory / Entra n knowledge.
• Experience with Windows, Linux, Unix privileged account management.
• Understanding of networking, certificates, and identity security controls.
• SIEM integration and PAM alerting experience.
• Proven experience as a PAM engineer, architect, or SME in a large enterprise environment.
• Experience designing Tier 0 / Tier 1 controls and identity security frameworks.
• Experience working with regulated environments (e.g. finance, healthcare, life sciences, manufacturing).
• Demonstrated ability to lead technical designs and influence stakeholders.
• Strong communication and stakeholder management skills.
• Ability to translate technical controls into business risk language.
• Structured problem-solving approach.
• Capable of operating independently and leading work streams.
• Certifications such as: CISSP / CISM / CCSP
• Vendor certifications (Cyber Ark Defender, Delinea Specialist, etc.)