PAM Engineer - Assistant Vice President

Mizuho EMEA; Greater London; Vor Ort; GBP 90.000 - 130.000; Vollzeit

Benefits dieser Stelle

Competitive salary

Discretionary bonus

Non-contributory pension

27 days annual leave

Hybrid working

Virtual GP

Wellbeing benefits

Zusammenfassung

Mizuho EMEA is seeking an experienced Privileged Access Management (PAM) Engineer to join our Cyber Security team in a hybrid role. You will own and improve PAM capabilities across Mizuho entities, including onboarding, credential management and session monitoring, while collaborating with multiple IT teams.

The ideal candidate has hands-on PAM experience in large environments, strong scripting skills (PowerShell, Python) and a solid background in AD/ cloud integrations.

Qualifikationen

• Proven hands-on PAM engineering in a large enterprise environment.
• Experience with privileged account onboarding, Safe design, rotation policies and credential-management processes.
• Strong scripting and automation capabilities using PowerShell and Python.
• Knowledge of Active Directory, Windows/Linux integration and ITIL change management.

Aufgaben

• Develop, administer and support the Privileged Access Management platform.
• Manage PAM platform lifecycle: design, upgrades, patching, configuration, and DR readiness.
• Onboard various privileged accounts using standards and Safe structures.
• Configure PAM components, rotation, verification and access workflows.
• Develop automation using APIs, PowerShell or Python for onboarding and reporting.
• Produce runbooks, designs, and evidence for controls and audits.
• Integrate PAM with AD, SIEM, ITSM, cloud services, databases and apps.
• Investigate incidents, failed rotations, and lockouts to drive remediation.
• Provide KPI/KRI and control reporting to support audits and improvements.

Kenntnisse

PAM engineering

Onboarding automation

PowerShell

Python

Active Directory

SIEM integration

Automation scripting

Cloud knowledge

Ausbildung

Degree in IT or Cyber Security

Azure certification

Tools

REST APIs

Azure

Windows Server

Linux

Microsoft Sentinel

SQL

Jobbeschreibung

Select how often (in days) to receive an alert:

We are seeking an experienced PAM (Privileged Access Management) Engineer to join our Cyber Security team. The role will focus on the development, operating and continuously improving PAM capabilities across a Mizuho entities.

The successful candidate will provide hands‑on technical ownership of privileged access controls, account onboarding, credential management, session monitoring, automation and platform resilience, while working closely with infrastructure, identity, application, database, audit and security teams.

Duties and Responsibilities

• Develop, administer and support the Privileged Access Management platform.
• Manage the full PAM platform lifecycle, including design, implementation, upgrades, patching, configuration, capacity, resilience, disaster recovery, health monitoring and operational support.
• Onboard privileged, service, database, application, local administrator, break‑glass and third‑party accounts using consistent standards, ownership controls and approved Safe structures.
• Configure and maintain PAM platforms, policies, standard and custom connection components, reconciliation accounts, credential rotation, verification, session controls and access workflows.
• Design and implement automation using APIs, PowerShell or Python to support discovery, bulk onboarding, metadata remediation, reporting and operational processes.
• Produce and maintain high‑level and low‑level designs, implementation procedures, runbooks, support documentation, control evidence and technical standards.
• Integrate PAM with Active Directory, identity‑management workflows, SIEM, ITSM, cloud services, databases and applications, including the development and support of custom web connectors and third‑party application connectors.
• Investigate platform incidents, failed rotations, authentication issues, connection failures and account lockouts, completing root‑cause analysis and sustainable remediation.
• Provide KPI, KRI, control‑effectiveness, platform‑health and compliance reporting, and support audit remediation, risk management and continuous improvement.

Qualifications, Skills and Experience

Experience:

• Proven hands‑on experience engineering and supporting PAM in a large enterprise environment.
• Strong experience with privileged account onboarding, Safe design, access models, rotation policies, privileged session connectivity and credential‑management processes.
• Experience troubleshooting PAM components, failed password changes, reconciliations, account verification, session connectivity and integration issues.
• Experience delivering platform upgrades, resilience improvements, disaster‑recovery testing and production changes through formal change controls.
• Experience working with infrastructure, Windows, Linux, database, application, identity, security operations, risk and audit stakeholders.
• Proficiency in automation, API integration and scripting, preferably PowerShell and Python.

Technical Skills:

• Advanced knowledge of PAM solutions.
• Working knowledge of Credential Providers, REST APIs and application credential‑management patterns.
• PAM design, platform configuration, account discovery, onboarding, reconciliation, rotation, verification, session monitoring, and development of custom web and third‑party application connectors.
• Windows Server, Active Directory, Group Policy, Kerberos, LDAP, RDP, SSH, certificates, networking, firewalls and load‑balancing fundamentals.
• Integration with Microsoft Sentinel or another SIEM for privileged‑access monitoring, alerting and audit evidence.
• Knowledge of Azure and hybrid‑cloud privileged‑access patterns; AWS or GCP experience is desirable.
• Scripting and automation using PowerShell, Python, REST APIs, JSON and source‑control practices.
• Understanding of ITIL processes, change management, incident management, problem management and technical documentation.

Security Domain Expertise:

• Privileged Access Management governance, control design and operating models.
• Privileged and service‑account lifecycle management, ownership, attestation and exception handling.
• Least privilege, segregation of duties, credential rotation, session isolation and monitoring.
• PAM solution security architecture, platform resilience, disaster recovery, audit support and regulatory control evidence.

Qualifications:

• Degree in IT, Cyber Security, Computer Science or a related discipline, or equivalent practical experience.
• Relevant certifications such as:
• Microsoft security or Azure certification
• CISSP, CISM or equivalent security certification

What Mizuho Can Offer You

Here at Mizuho, there are fantastic progression opportunities and clear paths to promotion. We will give you ample opportunity to affect change and to help grow our business.

In addition to the great opportunity outlined above we are also currently able to offer:

• Competitive starting salary, plus discretionary bonus
• Non‑contributory pension
• 27 days’ annual leave
• Core working hours*
• Hybrid working - office and home based*
• Virtual GP
• Wellbeing benefits, including Mental Health Allies and First Aiders

*For applicable roles only

At Mizuho, we embrace flexible ways of working when the role permits. We offer different working arrangements like part‑time, job‑sharing and hybrid (office and home) working. Our purpose‑led culture and global infrastructure help us connect, collaborate, and work together in agile ways to meet all our business needs.

We are committed to supporting equality and diversity, and seek to create a workplace that is fully inclusive. We welcome applications from all sections of the community that we operate in and from all ethnic backgrounds, sexual orientation, beliefs, gender identities and disabilities

If you require more information about our equal opportunities policy or wish to discuss any accessibility requirements or reasonable adjustments please contact the recruitment team – [e-mail] and we will be happy to help.