PAM admin

About the Role

Responsibilities

• Design, implement, and maintain enterprise-wide PAM solutions ensuring secure management of privileged credentials and access.
• Provide L3 technical support for complex PAM-related incidents and problems within the infrastructure environment.
• Develop and enforce PAM policies, procedures, and standards aligned with industry best practices and compliance requirements.
• Manage the full lifecycle of privileged accounts, including provisioning, certification, and deprovisioning.
• Implement and optimize PAM tools for session recording, credential vaulting, and automated password rotation.
• Operate Thales MFA and token management.
• Integrate MFA with ADFS for token management.
• Use BeyondTrust password vault for saving complex passwords.
• Conduct regular security assessments and audits of privileged access controls.
• Perform root cause analysis for security incidents related to privileged access.
• Create and maintain documentation for PAM architecture, configurations, and operational procedures.
• Collaborate with cross-functional teams to integrate PAM solutions with existing infrastructure and security tools.

Qualifications

• 8-10 years of experience in IT security with focus on privileged access management.
• Proven experience implementing and supporting enterprise BeyondTrust PAM solutions; other PAM solution experience is added knowledge.
• Strong knowledge of infrastructure components including servers, databases, network devices, and cloud environments.
• Advanced troubleshooting and problem-solving skills for complex L3 support issues.
• Experience with identity management concepts and technologies.
• Thorough understanding of security frameworks (NIST, ISO 27001, CIS).
• Experience with SIEM tools and security monitoring solutions.
• Knowledge of compliance requirements related to privileged access (SOX, PCI DSS, HIPAA).
• Excellent communication skills with ability to translate technical concepts to non-technical stakeholders.

Required Skills

• Relevant certifications such as CISSP, CISM, BeyondTrust.
• Experience with DevSecOps practices and tools.
• Familiarity with cloud security and PAM solutions for cloud environments (AWS, Azure, GCP).
• Experience with implementing Just-In-Time (JIT) and Zero Trust access models.
• Knowledge of threat detection and incident response processes.
• Experience with automation and orchestration tools for security operations.

Preferred Skills

• PAM Platforms: CyberArk, BeyondTrust, HashiCorp Vault, Thycotic Secret Server.
• Operating Systems: Windows Server, Linux.
• Directory Services: Active Directory, LDAP.
• Authentication: SAML, OAuth, MFA, PKI.
• Networking: TCP/IP, firewalls, routing, VPN technologies.
• Scripting: PowerShell, Python, Bash.
• SIEM Tools: Splunk, QRadar, ArcSight or similar.
• Infrastructure as Code: Terraform, Ansible.

Benefits

• Supportive, diverse, and global team with a brilliant culture.
• Competitive compensation and benefits including up to 20 days' vacation per year and insurances such as Term life and Business Travel insurance.
• Opportunities to upskill and get involved with exciting projects.
• Total Wellbeing focus with CSR Council, Diversity Council, Women Connect, and Sparks engagement groups.

About the Company