(Senior) PAM Engineer

Berenberg; Greater London; Hybrid; GBP 70,000 - 110,000; Full time

Benefits offered by this job

Private pension plan

Private Health Insurance

Enhanced parental leave

Employee Assistance Programme

Job summary

Berenberg in London is seeking an experienced Privileged Access Management (PAM) Engineer to strengthen its Cyber Security Operations team. You will lead the PAM strategy, governance and controls, deploy and integrate PAM platforms (CyberArk, BeyondTrust, Delinea) with Active Directory and Microsoft Entra ID, and mentor peers while driving a security-first culture across the bank's global operations.

The role emphasizes risk-based access governance, audit readiness, and collaboration with

Qualifications

• 3–5+ years in PAM and Identity Security.
• Experience deploying and maturing PAM programmes.
• Strong knowledge of AD/LDAP and identity services.
• Experience with privileged access monitoring and incident response.
• Financial services or regulated industry background desirable.
• Excellent communication with stakeholders.

Responsibilities

• Lead PAM strategy, governance and compliance with stakeholders.
• Deploy and maintain PAM platforms; integrate with AD/Entra ID.
• Enforce least privilege and account lifecycle governance.
• Monitor credential usage; investigate and respond to threats.
• Educate teams on privileged access security best practices.

Skills

PAM expertise

Identity security

Governance

RBAC/JIT

Tools

CyberArk

BeyondTrust

Delinea

Job description

For our Global Technology SPEAR division in London, we are looking to hire a:

Privileged Access Management (PAM) Engineer, Full time, Permanent Position - London

Your role in the team:

We are seeking an experienced PAM Engineer to strengthen our award-winning Cyber Security Operations team. As the financial sector faces increasingly complex cyber threats, the Cyber Security Operations (CSO) team is recognised across the industry for its excellence in defending against sophisticated adversaries and ensuring operational resilience. Joining the team means becoming part of a function that is critical to the bank’s success and highly respected within the wider cyber security community.

As an experienced PAM Engineer, you will play a pivotal role in the team, taking responsibility for the security, management, and governance of privileged access. You will oversee privileged account auditing, design effective access control strategies, and produce comprehensive reports for senior management and relevant stakeholders. Your expertise will be instrumental in enhancing the bank’s monitoring and detection capabilities regarding privileged access, helping to maintain a proactive and resilient security posture. You will also have the opportunity to extend our threat detection capabilities around credential usage and to mentor other members of the team, sharing best practices and driving continuous improvement across our access management and incident response processes.

You will be at the forefront of protecting Berenberg’s digital assets, client relationships, and global reputation, supporting a business that operates across global capital markets and serves international institutional clients to the highest standards of performance and service. We are looking for a motivated, energetic, and analytical professional with strong expertise in privileged access management, identity governance, and the technical investigation of credential-based threats, ideally gained within the financial services sector.

What will you do?

The primary responsibilities will be to lead and advance the Berenberg PAM strategy and ensure that it conforms with all relevant laws and regulations. Additionally support the creation and upkeep of a PAM governance framework, including the establishment of policies, standards, and procedures.

• Lead PAM Strategy, Governance & Compliance: Advance Berenberg’s PAM strategy and governance framework (policies, standards, and procedures), partnering with the first line of defence and audit stakeholders to ensure full alignment with internal and external regulatory requirements.
• Deploy, Integrate & Maintain PAM Platforms: Configure, administer, and maintain enterprise PAM solutions such as CyberArk, BeyondTrust, or Delinea (formerly Thycotic/Centrify) integrating them seamlessly with Active Directory, LDAP, and Microsoft Entra ID (Azure AD) while acting as the primary technical contact for vendor support, upgrades, and patching.
• Enforce Least Privilege & Account Lifecycle Governance: Design and enforce granular access control policies centred on Role-Based Access Control (RBAC), Just-In-Time (JIT) access, and the Principle of Least Privilege, while partnering with system owners to discover, categories, and audit privileged accounts (system, administrative, and service accounts) from creation through deactivation.
• Monitor, Detect & Respond to Credential Threats: Collaborate closely across the Cyber Security Operations team to monitor privileged session activities, detect and respond to unauthorised access attempts or policy violations, and support credential-related incident response investigations, containment, and remediation.
• Champion Privileged Security Best Practices: Educate and guide technical teams and business stakeholders on privileged access security standards, mentoring peers and driving a strong, proactive security-first culture across the organisation.

Who are we looking for?

• 3–5+ years of hands‑on experience operating within the Privileged Access Management (PAM) and Identity Security space.
• Proven technical expertise in deploying, administering, and troubleshooting leading PAM platforms (e.g., CyberArk, BeyondTrust, or Delinea/Thycotic/Centrify) and related security technologies.
• Demonstrated track record of successfully designing, implementing, and maturing a PAM programme and governance framework within a complex enterprise environment.
• Strong integration knowledge across core directory and identity services (Active Directory, LDAP, Microsoft Entra ID / Azure AD) and enterprise security applications.
• Operational security experience collaborating within or alongside a Cyber Security Operations team on privileged access monitoring, auditing, and incident response.
• Strong communication and stakeholder management skills, with the ability to translate complex access policies into clear guidance for both technical teams and senior management.
• Financial services or regulated industry experience is highly desirable.

What we offer you:

• Private pension plan - 10% of base salary contribution by Berenberg.
• Private Health Insurance.
• Enhanced parental leave policies.
• Employee Assistance Programme offering counselling sessions related to mental health, financial wellbeing and other topics.

We are a leading European private bank, with over 430 years of experience and deep-rooted history, but we are still shaping and heavily investing in our future. Our progress and evolution are driven by our people. We encourage them to try new approaches, voice their opinions and achieve success in their own way.

We provide opportunities for them to develop their talents, explore different career paths and achieve their full potential.

We’re an ambitious, forward-looking business, backed by centuries of tradition and built on innovation. You’ll find a culture that encourages people to think independently, act entrepreneurially and challenge the status quo. Together we collaborate to shape our business and fulfil our ambitious goals.

We welcome you to join us in our commitment to always do the right thing for our people, clients and our business – Our future is where you take us!

Berenberg is an Equal Opportunities Employer and prides itself on being a modern, dynamic and internationally orientated organisation. We value the rich diversity, skills and abilities and creative potential that people from differing backgrounds and experiences bring to the workplace. Every employee plays a vital role in providing quality service to all our customers and helping to create and inclusive working environment, where everyone can realise their full potential.

We’re committed to finding reasonable accommodations for candidates who require adjustments during our recruiting process. Please contact us directly on [e-mail] to discuss.