PAM Engineer

AVP – PAM Engineer

London | Hybrid Working

Are you a hands-on PAM engineer who enjoys solving complex technical problems, improving security controls and taking ownership of critical platforms?

My client is a major financial institution looking for an experienced Privileged Access Management Engineer to join its Cyber Security team.

Reporting to the Head of Proactive Security within the CISO Office, you'll take ownership of PAM engineering across the organisation, covering platform development, privileged account onboarding, credential management, automation and resilience.

This is a hands-on engineering role for someone who can go beyond day-to-day administration to improve how PAM is designed, integrated and operated across a large enterprise environment.

What you'll be doing:

• Engineering, configuring and supporting the PAM platform throughout its lifecycle.
• Onboarding privileged, service, application, database and third-party accounts.
• Managing credential rotation, reconciliation, verification and privileged session controls.
• Developing automation using PowerShell, Python and REST APIs.
• Integrating PAM with Active Directory, SIEM, ITSM, cloud platforms and business applications.
• Troubleshooting complex platform issues and driving root-cause remediation.
• Improving platform resilience, disaster recovery, monitoring and audit readiness.

What they're looking for:

• Strong hands-on PAM engineering experience in a large enterprise environment.
• Practical experience with account onboarding, Safe design, credential rotation and session management.
• Strong troubleshooting skills across PAM integrations and privileged access workflows.
• Scripting and automation experience using PowerShell, Python or REST APIs.
• A solid understanding of Windows Server, Active Directory, networking and authentication protocols.
• Experience integrating PAM with SIEM platforms such as Microsoft Sentinel.
• Knowledge of hybrid-cloud environments and formal change management.

Relevant PAM, Microsoft or security certifications are beneficial, but practical engineering experience is key.

If you want to take technical ownership of enterprise PAM, work on complex security integrations and continuously improve a critical security capability, I'd welcome a confidential conversation.