AVP - PAM Engineer

Nicoll Curtin; Greater London; Hybrid; GBP 120,000 - 180,000; Full time

Job summary

Nicoll Curtin is partnering with a leading international financial institution to appoint an experienced AVP - Privileged Access Management Engineer. This hands-on role focuses on developing, administering and enhancing an enterprise PAM platform, securing privileged access across a complex environment.

The successful candidate will work with Infrastructure, Identity, Security Operations, Risk and Audit, contribute to automation using PowerShell, Python and REST APIs, and support governance and

Qualifications

• Must have hands-on PAM engineering experience.
• Experience onboarding privileged accounts and access governance.
• Strong scripting with PowerShell or Python.
• Experience with large enterprise environments and security audits.

Responsibilities

• Own PAM platform lifecycle including config upgrades and support.
• Onboard and manage privileged, service, app and database accounts.
• Configure credential rotation, reconciliation and session controls.
• Develop automation using PowerShell, Python and REST APIs.
• Troubleshoot authentication and access issues.
• Support DR testing and platform health monitoring.
• Produce technical docs and audit evidence.
• Collaborate with Security, Infrastructure and Identity teams to enhance controls.

Skills

PAM engineering

Privileged Access Mgmt

PowerShell

Python

REST APIs

Azure

Hybrid cloud

AD/LDAP/SSO

Tools

Microsoft Sentinel

Azure

REST API integrations

Job description

We're partnering with a leading international financial institution that is continuing to invest heavily in its Cyber Security function and is looking to appoint an experienced AVP - Privileged Access Management (PAM) Engineer to join a growing security engineering team.

This is a hands-on engineering role focused on the development, administration and continuous enhancement of an enterprise Privileged Access Management platform. The successful candidate will play a key role in securing privileged access across a complex environment while working closely with Infrastructure, Identity, Security Operations, Risk and Audit teams.

• London / Hybrid (3 days on-site)
• Must have UK citizenship / ILR Visa / EU settled status

Key Responsibilities

• Own and support the PAM platform lifecycle, including implementation, configuration, upgrades, resilience and operational support.
• Onboard and manage privileged, service, application and database accounts.
• Configure credential rotation, reconciliation, verification and session management controls.
• Develop automation and integrations using PowerShell, Python and REST APIs.
• Troubleshoot authentication, connectivity and privileged access issues.
• Support disaster recovery testing, platform health monitoring and continuous improvement initiatives.
• Produce technical documentation, operational procedures and audit evidence.
• Work closely with stakeholders across Security, Infrastructure and Identity functions to improve privileged access controls.

Required Experience

• Strong hands-on experience supporting and engineering enterprise PAM solutions.
• Experience with privileged account onboarding, credential management and access governance.
• Strong understanding of Active Directory, Windows Server, Linux, LDAP, Kerberos, RDP and SSH.
• Experience integrating security platforms through APIs and automation frameworks.
• Scripting expertise with PowerShell and/or Python.
• Experience working within regulated or large-scale enterprise environments.
• Experience integrating PAM technologies with SIEM platforms such as Microsoft Sentinel.
• Exposure to Azure and hybrid-cloud environments.
• Knowledge of security governance, audit and compliance requirements.
• Relevant certifications such as PAM vendor certifications, Microsoft Security/Azure, CISSP or CISM.

This is an excellent opportunity to join a highly regarded security team within a global organisation that is investing significantly in cyber security, automation and modern security engineering practices. The role offers strong long-term career progression, exposure to complex security challenges and a flexible hybrid working environment.

If you're interested in discussing the opportunity in confidence, feel free to get in touch.