AVP - PAM Engineer

We're partnering with a leading international financial institution that is continuing to invest heavily in its Cyber Security function and is looking to appoint an experienced AVP - Privileged Access Management (PAM) Engineer to join a growing security engineering team.

This is a hands-on engineering role focused on the development, administration and continuous enhancement of an enterprise Privileged Access Management platform. The successful candidate will play a key role in securing privileged access across a complex environment while working closely with Infrastructure, Identity, Security Operations, Risk and Audit teams.

• Permanent (£70k - £80k)
• London / Hybrid (3 days on-site)
• Must have UK citizenship / ILR Visa / EU settled status

Key Responsibilities

• Own and support the PAM platform lifecycle, including implementation, configuration, upgrades, resilience and operational support.
• Onboard and manage privileged, service, application and database accounts.
• Configure credential rotation, reconciliation, verification and session management controls.
• Develop automation and integrations using PowerShell, Python and REST APIs.
• Troubleshoot authentication, connectivity and privileged access issues.
• Support disaster recovery testing, platform health monitoring and continuous improvement initiatives.
• Produce technical documentation, operational procedures and audit evidence.
• Work closely with stakeholders across Security, Infrastructure and Identity functions to improve privileged access controls.

Required Experience

• Strong hands-on experience supporting and engineering enterprise PAM solutions.
• Experience with privileged account onboarding, credential management and access governance.
• Strong understanding of Active Directory, Windows Server, Linux, LDAP, Kerberos, RDP and SSH.
• Experience integrating security platforms through APIs and automation frameworks.
• Scripting expertise with PowerShell and/or Python.
• Experience working within regulated or large-scale enterprise environments.

Desirable Skills

• Experience integrating PAM technologies with SIEM platforms such as Microsoft Sentinel.
• Exposure to Azure and hybrid-cloud environments.
• Knowledge of security governance, audit and compliance requirements.
• Relevant certifications such as PAM vendor certifications, Microsoft Security/Azure, CISSP or CISM.

This is an excellent opportunity to join a highly regarded security team within a global organisation that is investing significantly in cyber security, automation and modern security engineering practices. The role offers strong long-term career progression, exposure to complex security challenges and a flexible hybrid working environment.

If you're interested in discussing the opportunity in confidence, feel free to get in touch.