PAM Engineer

Iceberg; Greater London; On-site; GBP 70,000 - 95,000; Full time

Job summary

Iceberg is seeking a hands-on Privileged Access Management Engineer to join its Cyber Security team within a major financial institution. You will own PAM engineering across the organisation, covering platform development, onboarding privileged accounts, credential management and automation.

This role goes beyond daily administration, focusing on designing, integrating and operating PAM across a large enterprise, improving resilience and audit readiness.

Qualifications

• Hands-on PAM engineering experience in large enterprise environments.
• Experience onboarding privileged, service, application and database accounts.
• Strong troubleshooting across PAM integrations and privileged access workflows.
• Scripting/automation skills using PowerShell, Python or REST APIs.
• Foundational knowledge of Windows Server, Active Directory and authentication protocols.
• Experience with SIEM platforms such as Microsoft Sentinel.
• Understanding of hybrid-cloud environments and change control.

Responsibilities

• Engineering, configuring and supporting the PAM platform throughout its lifecycle.
• Onboarding privileged, service, application, database and third-party accounts.
• Managing credential rotation, reconciliation, verification and privileged session controls.
• Developing automation using PowerShell, Python and REST APIs.
• Integrating PAM with Active Directory, SIEM, ITSM, cloud platforms and business applications.
• Troubleshooting complex platform issues and driving root-cause remediation.
• Improving platform resilience, disaster recovery, monitoring and audit readiness.

Skills

PAM engineering

Account onboarding

Credential rotation

Session management

Automation scripting

Troubleshooting

Windows Server

Active Directory

Networking & auth protocols

SIEM integration

Tools

PowerShell

Python

REST APIs

Job description

Are you a hands‑on PAM engineer who enjoys solving complex technical problems, improving security controls and taking ownership of critical platforms?

My client is a major financial institution looking for an experienced Privileged Access Management Engineer to join its Cyber Security team.

Reporting to the Head of Proactive Security within the CISO Office, you'll take ownership of PAM engineering across the organisation, covering platform development, privileged account onboarding, credential management, automation and resilience.

This is a hands‑on engineering role for someone who can go beyond day‑to‑day administration to improve how PAM is designed, integrated and operated across a large enterprise environment.

What you'll be doing:

• Engineering, configuring and supporting the PAM platform throughout its lifecycle.
• Onboarding privileged, service, application, database and third‑party accounts.
• Managing credential rotation, reconciliation, verification and privileged session controls.
• Developing automation using PowerShell, Python and REST APIs.
• Integrating PAM with Active Directory, SIEM, ITSM, cloud platforms and business applications.
• Troubleshooting complex platform issues and driving root‑cause remediation.
• Improving platform resilience, disaster recovery, monitoring and audit readiness.

What they're looking for:

• Strong hands‑on PAM engineering experience in a large enterprise environment.
• Practical experience with account onboarding, Safe design, credential rotation and session management.
• Strong troubleshooting skills across PAM integrations and privileged access workflows.
• Scripting and automation experience using PowerShell, Python or REST APIs.
• A solid understanding of Windows Server, Active Directory, networking and authentication protocols.
• Experience integrating PAM with SIEM platforms such as Microsoft Sentinel.
• Knowledge of hybrid‑cloud environments and formal change management.

Relevant PAM, Microsoft or security certifications are beneficial, but practical engineering experience is key.

If you want to take technical ownership of enterprise PAM, work on complex security integrations and continuously improve a critical security capability, I'd welcome a confidential conversation.