Senior PAM Engineer

Investigo; Coventry; Hybrid; GBP 75,000 - 95,000; Full time

Job summary

Investigo is seeking a Senior Identity & Access Management Engineer (PAM) to design, implement and optimise IAM, PAM and identity governance across hybrid and cloud environments. You will work with Microsoft Entra ID, Conditional Access, SSO, MFA, and passwordless strategies, bridging security with scalable identity services.

The role involves hands-on PAM tooling such as CyberArk or StrongDM, cloud platforms (Azure, AWS, GCP), data governance and AI-driven IAM use cases, plus mentoring

Qualifications

• Extensive experience with IAM, PAM and identity governance.
• Hands-on with Microsoft Entra ID including CA, SSO, MFA, and passwordless authentication.
• Experience with PAM tools such as CyberArk or StrongDM.
• Familiarity with cloud platforms (Azure, AWS, GCP).
• Strong communication and stakeholder management skills.

Responsibilities

• Design, develop and improve IAM, PAM and identity governance solutions across hybrid and cloud environments.
• Provide technical guidance and mentoring to engineers.
• Collaborate with Engineering, Product and Security to gather requirements and deliver solutions.
• Analyse identity and access data to identify risks and drive improvements.

Skills

Microsoft Entra ID

IAM

PAM

AI/ML basics

Cloud security

Stakeholder management

Tools

CyberArk

StrongDM

Saviynt

SailPoint

Job description

Senior Identity & Access Management Engineer (PAM)

Location: Hybrid (London or Coventry)

Permanent

A Senior Identity & Access Management Engineer is required to join a growing technology business, helping to deliver and enhance IAM, PAM and identity governance capabilities across a modern technology environment. This is an exciting opportunity to work across Microsoft Entra ID, cloud security and emerging AI technologies, helping to strengthen identity security and develop innovative solutions.

Key Responsibilities & Skills

• Design, develop and improve IAM, PAM and identity governance solutions across hybrid and cloud environments.
• Strong hands‑on experience with Microsoft Entra ID, including Conditional Access, SSO, MFA, passwordless authentication, Access Packages and identity governance.
• Experience with PAM technologies such as CyberArk, StrongDM or similar, including privileged accounts, service accounts, password rotation and hybrid identity.
• Work across cloud platforms including Azure, AWS and GCP, ensuring secure access to applications, infrastructure and resources.
• Analyse identity and access data, including sign‑in logs and audit data, to identify risks and drive improvements.
• Develop and support AI‑driven IAM use cases, including anomaly detection, risk‑based access, intelligent access reviews and Agent identity governance.
• Work closely with Engineering, Product, Security and wider business stakeholders to gather requirements and deliver technical solutions.
• Provide technical guidance and mentoring to engineers, contributing to standards, best practices and continuous improvement.

Additional Experience & Attributes

• Experience with Identity Governance platforms such as Saviynt, SailPoint or similar.
• Understanding of AI/ML, data governance and responsible AI, particularly when working with identity and security data.
• Strong understanding of the identity threat landscape and modern security principles such as Zero Trust.
• Excellent communication and stakeholder management skills, with the ability to explain complex technical concepts clearly.
• Relevant certifications such as Microsoft Security/Identity, PAM, CISSP, CISM or equivalent would be advantageous.

This is an excellent opportunity to join a forward-thinking technology business where you'll work with modern IAM, PAM, cloud and AI technologies, helping to shape secure and innovative identity solutions.