Privileged Access Management (PAM) Engineer

About the role

The Privileged Access Management (PAM) Engineer will strengthen the organisation's identity security posture by designing, integrating, and maintaining PAM controls across on‑premise and cloud environments. This role ensures secure management of privileged accounts and sessions while collaborating with operations and support teams.

Key responsibilities

• Implement and configure Application Access Manager (AAM), Conjur and Secrets Hub solutions.
• Document solution designs, Standard Operating Procedures, and conduct knowledge transfer to operations.
• Provide guidance to support teams on technical issues and incident resolution.
• Integrate diverse platforms with CyberArk, including LDAP providers, Windows and Unix servers, databases, networking devices, middleware, and SaaS applications.
• Develop password and session management connectors for onboarding privileged accounts into CyberArk.
• Deploy and operationalise CyberArk components such as Privileged Threat Analytics (PTA).

Required profile

• Degree in Computer Science, Information Technology or related field.
• Hands‑on experience planning, scoping, deploying and integrating PAM solutions.
• Familiarity with SIEM, IT Service Management tools (ServiceNow, BMC Remedy), databases (SQL, Oracle), network configuration, Windows AD, Unix/Linux and Windows Server.
• Experience deploying PAM solutions in cloud environments (AWS, Azure, DevOps) and managing privileged identities in the cloud.
• PAM certifications are a plus.
• Proficiency in scripting for automation (NodeJS, Java, Python) and CI/CD pipeline setup.

Required skills

• Application Access Manager (AAM)
• Conjur
• Secrets Hub
• CyberArk and Privileged Threat Analytics (PTA)
• LDAP integration
• Windows Server, Unix/Linux
• SQL, Oracle databases
• Network devices and middleware
• SaaS application integration
• AWS, Azure, DevOps
• NodeJS, Java, Python scripting
• CI/CD pipelines
• SIEM
• ServiceNow, BMC Remedy