Security Engineer - PAM Implementation - Banking in London

Excellent opportunity opens for a Privileged Access Management Engineer to join a London-based International Bank. You will take ownership of the implementation of the new PAM solution. Working closely with the Technology Team and Information Security Office, you will take responsibility for the remediation of privileged access risks and audit findings.

Key responsibilities:

• Lead the implementation and rollout of the PAM solution across the bank's environments.
• Configure PAM components including privileged account vaulting, session management, access control policies and audit capabilities.
• Onboard privileged accounts including domain administrator accounts, service accounts, network administrator accounts, application administrator accounts and database privileged accounts.
• Integrate PAM with core infrastructure including Active Directory/Entra ID, Windows Servers, Linux Servers, network devices and security appliances.
• Define and implement privileged access workflows including access request, approval, break-glass, credential rotation and session recording processes.
• Collaborate with the Technology teams and the Information Security Office to identify privileged access use cases and agree onboarding priorities.
• Support remediation of audit and assurance findings related to privileged access, shared administrator accounts and privileged session monitoring.
• Coordinate with the vendor and the bank's technology partners to implement, test and troubleshoot the PAM solution.
• Prepare operational documentation including PAM configuration, onboarding procedures, support runbooks and handover materials.
• Provide knowledge transfer to Technology and UAM teams to support ongoing operation of the PAM solution.

Qualifications & Experience:

• Proven hands-on experience implementing PAM solutions.
• Hands-on experience onboarding privileged domain accounts, service accounts, local administrator accounts and network/appliance administrator accounts.
• Strong understanding of identity and access management principles, least privilege, privileged session control and credential life cycle management.
• Hands-on experience with Active Directory, Entra ID, Windows Server and Linux server environments.
• Experience integrating PAM with network devices, Firewalls, security appliances, application platforms and infrastructure systems.
• Experience working with third-party vendors to deliver security technology deployments or perform impact assessments.
• Experience producing technical documentation, operational runbooks and knowledge transfer materials.
• Proficiency in scripting languages such as PowerShell or Bash (preferred).
• Degree in Computer Science, Information Security or a related discipline (preferred).
• Experience in IT within financial services or regulated environments (preferred).

Essential Competencies/Skills:

• Analytical thinking
• Planning and Organising
• Effective communication and documentation skills
• Problem solving
• Delivery-focused approach
• Ability to work independently within a short-term contractor engagement

Technical Skills:

• Privileged Access Management platforms (Beyond Trust, Cyber Ark, etc.)
• Active Directory and Entra ID
• Microsoft Windows Server
• Linux Servers (Red Hat, Oracle, Ubuntu)
• Networking devices (Cisco and Meraki preferred)
• Microsoft Azure
• VMware
• Microsoft SQL Server
• Scripting using PowerShell or Bash (preferred)