IAM Security Engineer

We are seeking an experienced Senior Privileged Identity Management (PIM) & Privileged Access Management (PAM) Engineer to design, implement, and support enterprise-class privileged access and identity security solutions. The successful candidate will play a key role in strengthening the organisation’s Zero Trust security framework by securing privileged accounts, administrative access, service accounts, and critical infrastructure across on-premises, cloud, and hybrid environments.

The ideal candidate will have strong expertise in Microsoft Entra ID PIM, CyberArk, BeyondTrust, Delinea, Azure, AWS, and Identity & Access Management (IAM) technologies, with proven experience delivering PAM transformation and governance initiatives within large enterprise environments.

Key Responsibilities

Privileged Access Management

• Design, implement, and administer enterprise PAM solutions.
• Secure privileged accounts, shared accounts, service accounts, and application credentials.
• Implement credential vaulting, password rotation, and session management controls.
• Configure privileged session monitoring, recording, and auditing capabilities.
• Develop and maintain PAM operational procedures and standards.
• Support PAM onboarding activities across infrastructure, applications, databases, and cloud platforms.

Privileged Identity Management

• Implement and manage Microsoft Entra ID Privileged Identity Management (PIM).
• Configure:
  • Just-in-Time (JIT) access
  • Just-Enough Access (JEA)
  • Role activation approval workflows
  • Time-bound privileged access
  • Access reviews
  • Privileged role governance
• Implement Role-Based Access Control (RBAC) and Attribute-Based Access Control (ABAC) frameworks.
• Support identity lifecycle management and privileged access certification processes.

Cloud Security (Azure & AWS)

• Secure privileged access across Microsoft Azure and AWS environments.
• Implement privileged access controls for:
  • Azure subscriptions
  • Azure Management Groups
  • Microsoft Entra ID roles
  • AWS IAM roles
  • AWS Organizations
  • AWS privileged accounts
• Integrate PAM controls within cloud-native and hybrid architectures.
• Support cloud security and Zero Trust initiatives.

Identity & Access Management Integration

• Integrate PAM solutions with:
  • Microsoft Entra ID
  • Active Directory
  • LDAP
  • SailPoint
  • Saviynt
  • ServiceNow
  • Okta
  • Ping Identity
• Support Single Sign-On (SSO), Multi-Factor Authentication (MFA), and identity federation initiatives.
• Work closely with IAM and IGA teams on privileged access governance.

Security Operations & Compliance

• Support audit and compliance activities related to privileged access controls.
• Perform privileged account reviews and access certification exercises.
• Investigate privileged access incidents and security events.
• Develop reporting and dashboards for privileged access metrics and compliance monitoring.
• Ensure alignment with Zero Trust and least-privilege security principles.

Automation & Engineering

• Develop automation scripts for PAM provisioning and administration.
• Automate onboarding, password management, account discovery, and reporting processes.
• Integrate PAM solutions with ITSM and workflow platforms.
• Support Infrastructure as Code (IaC) and DevSecOps privileged access requirements.

Experience

Required Skills & Experience

• 5-10+ years of experience in Identity & Access Management or Cyber Security.
• 3-5+ years of hands-on experience implementing and supporting PAM solutions.
• Experience working in enterprise-scale environments with regulatory and compliance requirements.
• Strong troubleshooting and operational support experience.

Technical Skills

Microsoft Security Technologies

• Microsoft Entra ID
• Entra ID Privileged Identity Management (PIM)
• Conditional Access
• Azure RBAC
• Azure Management Groups
• Microsoft Defender Suite
• Microsoft Sentinel

PAM Technologies

Experience With One Or More Of

• CyberArk PAS
• CyberArk Privilege Cloud
• BeyondTrust PAM
• Delinea (Thycotic)
• ARCON PAM
• One Identity Safeguard
• HashiCorp Vault

Cloud Platforms

Microsoft Azure

• Azure Security
• Azure Identity Services
• Azure Key Vault
• Azure RBAC
• Azure Policy

AWS

• AWS IAM
• AWS Organizations
• AWS Security Hub
• AWS IAM Identity Center
• AWS KMS

Scripting & Automation

• PowerShell
• Python
• REST APIs
• ARM Templates
• Terraform

Identity & Governance

• Active Directory
• LDAP
• Identity Governance
• Access Certification
• Segregation of Duties (SoD)
• Joiner-Mover-Leaver Processes

Security Domain Knowledge

• Privileged Access Management (PAM)
• Identity Governance & Administration (IGA)
• Zero Trust Architecture
• RBAC & ABAC
• Identity Security
• Authentication & Authorisation
• Security Operations
• Risk & Compliance
• Access Governance

Preferred Certifications

• CyberArk Defender Certification
• CyberArk Sentry Certification
• Microsoft Certified: Identity and Access Administrator Associate (SC-300)
• Microsoft Certified: Cybersecurity Architect Expert (SC-100)
• CISSP
• CISM
• Certified PAM Professional (CPP)
• AWS Security Specialty
• Azure Security Engineer Associate (AZ-500)