IDAM PAM Engineer in London

IDAM PAM Engineer in London

London Full-Time 60000 - 80000 ÂŁ / year (est.) No home office possible
AVEVA Denmark

At a Glance

  • Tasks: Lead the design and automation of privileged access management solutions.
  • Company: Join AVEVA, a trusted software provider for leading industrial companies.
  • Benefits: Enjoy flexible benefits, 28 days annual leave, and a supportive work culture.
  • Other info: Collaborative environment with opportunities for growth and continuous learning.
  • Why this job: Make a real impact in cybersecurity while working with cutting-edge technologies.
  • Qualifications: Hands-on experience in PAM and SailPoint is essential.

The predicted salary is between 60000 - 80000 ÂŁ per year.

AVEVA is seeking Privileged Access Management (PAM) Engineers to lead the delivery of highly automated, enterprise‑grade privileged access controls as part of our IDAM function. This is a senior, hands‑on engineering role with significant responsibility and influence. You will design, build, and operate PAM capabilities with automation as a core principle, integrating SailPoint as the enterprise IGA platform and supporting the current and future adoption of CyberArk (or equivalent).

You will act as a senior technical authority, defining standards, patterns, and automation approaches while working closely with Security Architecture, Infrastructure, and Audit teams.

Key responsibilities
  • Lead the automation‑first design and engineering of PAM solutions
  • Play a senior role in CyberArk (or similar) implementation and expansion
  • Engineer fully automated onboarding for:
  • Privileged user accounts
  • Service and application accounts
  • Credentials, secrets, and keys
  • Integrate PAM with SailPoint for automated governance, lifecycle, and access reviews
  • Define PAM standards, onboarding patterns, and automation frameworks
  • Automate privileged access requests, approvals, and provisioning via ServiceNow
  • Build automated PAM and SailPoint reporting for audits and compliance
  • Reduce manual PAM operations through scripting and orchestration
  • Secure privileged access across:
    • Active Directory environments
    • Windows and Linux platforms
    • Azure and cloud services
    • Applications and DevOps pipelines
  • Act as senior escalation point for PAM‑related incidents
  • Partner with Security Architecture and Audit on control design and evidence automation
  • Produce high‑quality architecture diagrams, runbooks, and engineering documentation
  • Apply AI‑assisted tooling to enhance troubleshooting and operational insight
  • Essential requirements
    • Significant, hands‑on experience in Privileged Access Management
    • Hands‑on SailPoint experience is mandatory
    • Strong experience with CyberArk (PAS, PSM, EPM) or equivalent tools
    • Proven ability to engineer and automate PAM at scale
    • Strong understanding of privileged access risks and threat vectors
    • Advanced experience with Active Directory and hybrid identity environments
    • Strong automation and scripting skills (PowerShell, Python, APIs)
    • Experience supporting audits using automated evidence and reporting
    • Ability to operate as a senior engineer, providing technical leadership
    Desired skills
    • Experience using ServiceNow and/or Jira to automate privileged access workflows
    • Broader knowledge of IAM, IGA, Zero Trust, or identity security domains
    • Experience working with DevOps teams, including securing pipelines and secrets
    • Bachelor’s degree in Computer Science, Engineering, Mathematics, or related discipline; or equivalent experience
    • Relevant certifications (e.g. CyberArk, SailPoint, Microsoft Security, Cloud Security)
    • Strong communication and stakeholder management skills
    • Customer‑focused mindset, balancing security with business usability
    • Demonstrated growth mindset, passionate about continuous learning
    • Experience mentoring or guiding other engineers

    Our global team of 300+ IT professionals is responsible for the systems and platforms that keep AVEVA running. By empowering our colleagues and ensuring the smooth operation of the company, we help keep the business healthy and productivity high. We also provide key support for the transformation and modernisation efforts globally.

    We pride ourselves on a collaborative, inclusive and authentic culture that provides a framework allowing for autonomy, whilst always being available for support and guidance. We respect the differences that each team member brings and seek to include those perspectives in our solutions for our business functions. The energy and sense of purpose is evident when talking to team members, you will feel part of something special from the first day you join.

    Find out more: Benefits include: Flexible benefits fund, emergency leave days, adoption leave, 28 days annual leave.

    IDAM PAM Engineer in London employer: AVEVA Denmark

    AVEVA is an exceptional employer, offering a dynamic work environment in the heart of the UK, with opportunities for professional growth and development in the field of Privileged Access Management. Our collaborative and inclusive culture fosters innovation and autonomy, while our commitment to employee well-being is reflected in our flexible benefits and generous leave policies. Join us to be part of a team that values your contributions and supports your career journey from day one.
    AVEVA Denmark

    Contact Detail:

    AVEVA Denmark Recruiting Team

    StudySmarter Expert Advice 🤫

    We think this is how you could land IDAM PAM Engineer in London

    ✨Tip Number 1

    Network like a pro! Reach out to folks in the industry, especially those already at AVEVA. A friendly chat can open doors and give you insider info on what they're really looking for.

    ✨Tip Number 2

    Show off your skills! Prepare a mini-project or demo that highlights your experience with PAM tools like CyberArk and SailPoint. This hands-on approach can really impress during interviews.

    ✨Tip Number 3

    Be ready to discuss real-world scenarios. Think about challenges you've faced in PAM and how you tackled them. This shows you're not just book-smart but also street-smart in the field.

    ✨Tip Number 4

    Apply through our website! It’s the best way to ensure your application gets seen by the right people. Plus, it shows you're genuinely interested in joining the AVEVA team.

    We think you need these skills to ace IDAM PAM Engineer in London

    Privileged Access Management (PAM)
    SailPoint
    CyberArk (PAS, PSM, EPM)
    Automation and Scripting (PowerShell, Python, APIs)
    Active Directory
    Hybrid Identity Environments
    ServiceNow
    Jira
    Identity and Access Management (IAM)
    Identity Governance and Administration (IGA)
    Zero Trust Security
    Technical Leadership
    Communication Skills
    Stakeholder Management
    Continuous Learning

    Some tips for your application 🫡

    Tailor Your CV: Make sure your CV is tailored to the IDAM PAM Engineer role. Highlight your hands-on experience with Privileged Access Management and any relevant tools like SailPoint and CyberArk. We want to see how your skills match what we're looking for!

    Craft a Compelling Cover Letter: Your cover letter is your chance to shine! Use it to explain why you're passionate about PAM and how your experience aligns with our needs. Don’t forget to mention your automation skills and how you can contribute to our team at AVEVA.

    Showcase Your Projects: If you've worked on any relevant projects, make sure to include them in your application. We love seeing real-world examples of your work, especially if they involve automation or integrating PAM solutions. It helps us understand your practical experience!

    Apply Through Our Website: We encourage you to apply through our website for the best chance of getting noticed. It’s straightforward and ensures your application goes directly to us. Plus, you’ll find all the details you need about the role there!

    How to prepare for a job interview at AVEVA Denmark

    ✨Know Your PAM Tools Inside Out

    Make sure you’re well-versed in the tools mentioned in the job description, especially CyberArk and SailPoint. Brush up on your hands-on experience and be ready to discuss specific projects where you've implemented these tools, focusing on automation and integration.

    ✨Showcase Your Automation Skills

    Since this role emphasises automation, prepare examples of how you've automated privileged access management processes in the past. Be ready to talk about the scripting languages you’ve used, like PowerShell or Python, and how they improved efficiency in your previous roles.

    ✨Understand Privileged Access Risks

    Familiarise yourself with the common risks and threat vectors associated with privileged access. During the interview, demonstrate your understanding of these risks and how your engineering solutions can mitigate them, showing that you can think critically about security.

    ✨Prepare for Technical Leadership Questions

    As a senior engineer, you’ll need to show your ability to lead and mentor. Think of examples where you’ve guided teams or made significant technical decisions. Be prepared to discuss how you collaborate with other teams, like Security Architecture and Audit, to ensure compliance and security.

    IDAM PAM Engineer in London
    AVEVA Denmark
    Location: London

    Land your dream job quicker with Premium

    You’re marked as a top applicant with our partner companies
    Individual CV and cover letter feedback including tailoring to specific job roles
    Be among the first applications for new jobs with our AI application
    1:1 support and career advice from our career coaches
    Go Premium

    Money-back if you don't land a job in 6-months

    >