PAM Engineer - Assistant Vice President

Mizuho; Greater London; Hybrid; GBP 70,000 - 110,000; Full time

Benefits offered by this job

Competitive salary

Discretionary bonus

Non-contributory pension

27 days annual leave

Hybrid working

Virtual GP

Wellbeing benefits

Job summary

Mizuho is seeking an experienced PAM Engineer to join our Cyber Security team in the UK. The role focuses on developing, operating and continuously improving PAM capabilities across Mizuho entities.

You will own privileged access controls, account onboarding, credential management, session monitoring, automation and platform resilience, while collaborating with infra, identity, application, database, audit and security teams.

Qualifications

• Proven hands-on PAM engineering experience in a large enterprise.
• Experience onboarding and managing privileged accounts, rotation policies and session controls.
• Ability to design, implement and automate PAM workflows via APIs and scripting.

Responsibilities

• Develop, administer and support the PAM platform.
• Manage full PAM lifecycle: design, upgrades, patching, resilience, DR, health monitoring.
• Onboard various privileged accounts using standardised ownership controls and Safe structures.
• Configure PAM components, rotation, verification, and access workflows.
• Automate discovery, onboarding, remediation and reporting using APIs and scripts.
• Produce runbooks, designs and technical documentation for PAM operations.
• Integrate PAM with AD, identity workflows, SIEM, ITSM, cloud services, and apps.
• Investigate incidents and perform root-cause analysis for remediation.
• Provide KPI, KRI and compliance reporting to support audit and risk management.

Skills

PAM engineering

Privileged access

Automation

PowerShell

Python

Active Directory

SIEM integration

Cloud services

Education

Degree in IT or Cyber Security

Tools

PowerShell

Python

Azure

Windows Server

Job description

Profile Summary

We are seeking an experienced PAM (Privileged Access Management) Engineer to join our Cyber Security team. The role will focus on the development, operating and continuously improving PAM capabilities across a Mizuho entities.

Profile Summary

We are seeking an experienced PAM (Privileged Access Management) Engineer to join our Cyber Security team. The role will focus on the development, operating and continuously improving PAM capabilities across a Mizuho entities. The successful candidate will provide hands‑on technical ownership of privileged access controls, account onboarding, credential management, session monitoring, automation and platform resilience, while working closely with infrastructure, identity, application, database, audit and security teams.

Duties And Responsibilities

• Develop, administer and support the Privileged Access Management platform.
• Manage the full PAM platform lifecycle, including design, implementation, upgrades, patching, configuration, capacity, resilience, disaster recovery, health monitoring and operational support.
• Onboard privileged, service, database, application, local administrator, break-glass and third-party accounts using consistent standards, ownership controls and approved Safe structures.
• Configure and maintain PAM platforms, policies, standard and custom connection components, reconciliation accounts, credential rotation, verification, session controls and access workflows.
• Design and implement automation using APIs, PowerShell or Python to support discovery, bulk onboarding, metadata remediation, reporting and operational processes.
• Produce and maintain high‑level and low‑level designs, implementation procedures, runbooks, support documentation, control evidence and technical standards.
• Integrate PAM with Active Directory, identity‑management workflows, SIEM, ITSM, cloud services, databases and applications, including the development and support of custom web connectors and third‑party application connectors.
• Investigate platform incidents, failed rotations, authentication issues, connection failures and account lockouts, completing root‑cause analysis and sustainable remediation.
• Provide KPI, KRI, control-effectiveness, platform‑health and compliance reporting, and support audit remediation, risk management and continuous improvement.

Experience

Qualifications, Skills and Experience

• Proven hands‑on experience engineering and supporting PAM in a large enterprise environment.
• Strong experience with privileged account onboarding, Safe design, access models, rotation policies, privileged session connectivity and credential‑management processes.
• Experience troubleshooting PAM components, failed password changes, reconciliations, account verification, session connectivity and integration issues.
• Experience delivering platform upgrades, resilience improvements, disaster‑recovery testing and production changes through formal change controls.
• Experience working with infrastructure, Windows, Linux, database, application, identity, security operations, risk and audit stakeholders.
• Proficiency in automation, API integration and scripting, preferably PowerShell and Python.

Technical Skills

• Advanced knowledge of PAM solutions.
• Working knowledge of Credential Providers, REST APIs and application credential‑management patterns.
• PAM design, platform configuration, account discovery, onboarding, reconciliation, rotation, verification, session monitoring, and development of custom web and third‑party application connectors.
• Windows Server, Active Directory, Group Policy, Kerberos, LDAP, RDP, SSH, certificates, networking, firewalls and load‑balancing fundamentals.
• Integration with Microsoft Sentinel or another SIEM for privileged‑access monitoring, alerting and audit evidence.
• Knowledge of Azure and hybrid‑cloud privileged‑access patterns; AWS or GCP experience is desirable.
• Scripting and automation using PowerShell, Python, REST APIs, JSON and source‑control practices.
• Understanding of ITIL processes, change management, incident management, problem management and technical documentation.

Security Domain Expertise

• Privileged Access Management governance, control design and operating models.
• Privileged and service‑account lifecycle management, ownership, attestation and exception handling.
• Least privilege, segregation of duties, credential rotation, session isolation and monitoring.
• PAM solution security architecture, platform resilience, disaster recovery, audit support and regulatory control evidence.

Qualifications

• Degree in IT, Cyber Security, Computer Science or a related discipline, or equivalent practical experience.
• Relevant certifications such as:
• PAM relevant certification
• Microsoft security or Azure certification
• CISSP, CISM or equivalent security certification

What Mizuho Can Offer You

Here at Mizuho, there are fantastic progression opportunities and clear paths to promotion. We will give you ample opportunity to affect change and to help grow our business.

In addition to the great opportunity outlined above we are also currently able to offer:

• Competitive starting salary, plus discretionary bonus
• Non‑contributory pension
• 27 days' annual leave
• Core working hours*
• Hybrid working - office and home based*
• Virtual GP
• Wellbeing benefits, including Mental Health Allies and First Aiders
• For applicable roles only

At Mizuho, we embrace flexible ways of working when the role permits. We offer different working arrangements like part‑time, job‑sharing and hybrid (office and home) working. Our purpose‑led culture and global infrastructure help us connect, collaborate, and work together in agile ways to meet all our business needs.

We are committed to supporting equality and diversity, and seek to create a workplace that is fully inclusive. We welcome applications from all sections of the community that we operate in and from all ethnic backgrounds, sexual orientation, beliefs, gender identities and disabilities

If you require more information about our equal opportunities policy or wish to discuss any accessibility requirements or reasonable adjustments please contact the recruitment team – [e-mail] and we will be happy to help.