IDAM PAM Engineer

Job Title

IDAM PAM Engineer

Location

India (Hyderabad / Bangalore)

Employment Type

Full-time

Job Summary

AVEVA is seeking Senior Privileged Access Management (PAM) Engineers to lead the delivery of highly automated, enterprisegrade privileged access controls as part of our IDAM function.

This is a senior, handson engineering role with significant responsibility and influence. You will design, build, and operate PAM capabilities with automation as a core principle, integrating SailPoint as the enterprise IGA platform and supporting the current and future adoption of CyberArk (or equivalent).

You will act as a senior technical authority, defining standards, patterns, and automation approaches while working closely with Security Architecture, Infrastructure, and Audit teams.

Key responsibilities

• Lead the automationfirst design and engineeringof PAM solutions

• Play a senior role in CyberArk (or similar) implementation and expansion

• Engineer fully automated onboarding for:

• Privileged user accounts

• Service and application accounts

• Credentials, secrets, and keys

• Integrate PAM with SailPointfor automated governance, lifecycle, and access reviews

• Define PAM standards, onboarding patterns, and automation frameworks

• Automate privileged access requests, approvals, and provisioning via ServiceNow

• Build automated PAM and SailPoint reportingfor audits and compliance

• Reduce manual PAM operations through scripting and orchestration

• Secure privileged access across:

• Active Directory environments

• Windows and Linux platforms

• Azure and cloud services

• Applications and DevOps pipelines

• Act as senior escalation point for PAMrelated incidents

• Partner with Security Architecture and Audit on control design and evidence automation

• Produce highquality architecture diagrams, runbooks, and engineering documentation

• Apply AIassisted toolingto enhance troubleshooting and operational insight

Essential requirements

• Significant, handson experience in Privileged Access Management
• Handson SailPoint experience is mandatory
• Strong experience with CyberArk(PAS, PSM, EPM) or equivalent tools
• Proven ability to engineer and automate PAM at scale
• Strong understanding of privileged access risks and threat vectors
• Advanced experience with Active Directory and hybrid identity environments
• Strong automation and scripting skills (PowerShell, Python, APIs)
• Experience supporting audits using automated evidence and reporting
• Ability to operate as a senior engineer, providing technical leadership

Desired skills

• Experience using ServiceNow and/or Jirato automate privileged access workflows
• Broader knowledge of IAM, IGA, Zero Trust, or identity security domains
• Experience working with DevOps teams, including securing pipelines and secrets
• Bachelors degree in Computer Science, Engineering, Mathematics, or related discipline; or equivalent experience
• Relevant certifications (e.g. CyberArk, SailPoint, Microsoft Security, Cloud Security)
• Strong communication and stakeholder management skills
• Customerfocused mindset, balancing security with business usability
• Demonstrated growth mindset, passionate about continuous learning
• Experience mentoring or guiding other engineers