Principal Security Engineer - PAM

About the role

The Principal Security Engineer at Network For Electronic Transfers (S) designs, implements and maintains identity and access management solutions that protect systems and data through strong authentication, authorization and access controls. The role works closely with IT, business application owners, security operations and information security risk teams to deploy and optimise Privileged Access Management (PAM) solutions.

Key responsibilities

• Design, implement and maintain enterprise PAM architecture aligned with security strategy, risk posture and business needs.
• Review and validate vendor designs, configurations and deliverables for security, scalability, resilience and regulatory compliance.
• Work with PAM vendors and system integrators to meet defined security, architectural and operational standards.
• Lead end-to-end implementation, configuration and rollout of PAM platforms across on-premises, cloud and hybrid environments.
• Integrate PAM with core infrastructure, applications, identity systems and SOC tools.
• Manage the privileged account lifecycle, including discovery, onboarding, maintenance and decommissioning.
• Ensure continuous monitoring and session auditing, including logging, recording and review of privileged activity.
• Drive risk remediation of excessive access, policy violations and control gaps.
• Keep PAM platforms on supported, secure versions, including patching, upgrades and vulnerability remediation.
• Support incident response and investigations by providing privileged session logs and recordings.
• Drive automation and integration via APIs, scripting and orchestration tools such as SOAR.
• Maintain documentation, standards, procedures, architecture diagrams and runbooks.