Senior PAM Engineer: Zero-Trust Automation & Vaulting

Saxo; København; On-site; DKK 800,000 - 1,200,000; Full time

Job summary

Saxo's Enterprise Identity & Data Security (EIDS) team is seeking a seasoned cybersecurity professional to lead PAM implementation, operation and continuous improvement across Saxo’s technology landscape. You will collaborate with infrastructure, cloud, security and application teams to reduce privileged access risk through automation and Zero Trust.

The role requires 7–10 years in PAM/IAM, hands-on experience with Delinea/CyberArk, and a practical, risk-based approach in a financial services

Qualifications

• 7-10 years of experience in Privileged Access Management, Identity & Access Management, or Cyber Security Engineering.
• Hands-on experience with enterprise PAM solutions.
• Strong understanding of privileged access risks, account lifecycle management, and security best practices.
• Experience securing Windows, Linux, cloud platforms, databases, and network devices.
• Knowledge of Active Directory, Entra ID, and Azure environments.
• Experience with automation and scripting, including PowerShell and APIs.
• Experience working in regulated environments, preferably within financial services.

Responsibilities

• Implement and manage privileged access controls across on-premises and cloud environments.
• Administer PAM capabilities including credential vaulting, password rotation, session management, and privileged session recording.
• Onboard privileged accounts, systems, applications, and service accounts into the PAM platform.
• Support adoption of least-privilege, Just-In-Time (JIT), and Zero Trust access models.
• Automate PAM processes and integrations using PowerShell and APIs.
• Support monitoring, reporting, audits, and access to governance activities.

Skills

PAM expertise

IAM experience

Automation scripting

Security engineering

Regulated environments

Windows/Linux/cloud

Privilege risk knowledge

Tools

Delinea Secret Server

CyberArk

BeyondTrust

One Identity

Job description

Saxo's Enterprise Identity & Data Security (EIDS) team is seeking a seasoned cybersecurity professional to lead PAM implementation, operation and continuous improvement across Saxo’s technology landscape. You will collaborate with infrastructure, cloud, security and application teams to reduce privileged access risk through automation and Zero Trust.

The role requires 7–10 years in PAM/IAM, hands-on experience with Delinea/CyberArk, and a practical, risk-based approach in a financial services