Cloud PAM Engineer

IG Group; Bengaluru; Hybrid; INR 3,000,000 - 4,200,000; Full time

Benefits offered by this job

Hybrid working model

Job summary

IG Group is seeking a Cloud PAM Engineer to secure privileged access across AWS and GCP, architecting and delivering scalable PAM capabilities in a cloud-first environment.

You will report to the PAM Manager and translate technical risk into clear recommendations, helping IG stay audit-ready and secure as our cloud footprint grows.

Qualifications

• 5+ years of cybersecurity experience with cloud platforms.
• Hands-on AWS PAM and Cloud PAM implementations.
• Experience with HashiCorp Vault and JIT access.

Responsibilities

• Lead design, implementation, and enhancement of Cloud PAM across AWS and GCP.
• Onboard and manage privileged accounts with secure vaulting and access controls.
• Support password rotation, session monitoring/recording, and secrets management.

Skills

5+ years cybersecurity

AWS PAM

Cloud IAM/PAM

RBAC

HashiCorp Vault

JIT access

Documentation

Tools

HashiCorp Vault

Job description

Job Title

Cloud PAM Engineer

Job Description

IG Group is a FTSE 100 fintech operating across five continents, serving over 1.3m customers and handling billions of dollars in transactions - built on scale, trust, and proof. We didn't pivot to innovation; it's how we've always operated. What that means for the people who work here is real: genuinely complex problems to solve, the technology and resources to tackle them properly, and the kind of scope that's rare in established businesses. The bar is high - bring a curious and forward-thinking mindset and we'll give you the platform to define what comes next. Join us at IG - the future gets built here.

Your team

This role sits within IG's Cybersecurity function, as part of the wider IAM and PAM team. We own the controls that protect privileged access across a fast-growing, multi-cloud estate, partnering daily with cloud engineering, security operations, compliance, and audit as IG scales its cloud-first environment.

Your role in the Team's Success

As Cloud PAM Engineer, you will secure IG's privileged access across AWS, and GCP - designing, implementing, and continuously enhancing our Privileged Access Management capability, hands-on, at the pace our cloud footprint is growing. Reporting to the PAM Manager, you will be the subject matter expert for privileged access in a cloud-first environment, translating technical risk into clear recommendations for architects, leaders, and cross-functional stakeholders. Your work directly reduces the risk of privileged account compromise, keeps IG audit-ready against regulatory and internal standards, and builds the automation that lets the business scale safely.

What You'll Do

• Lead the design, implementation, and ongoing enhancement of Cloud PAM solutions across AWS, and GCP, ensuring they are scalable, resilient, and aligned with enterprise architecture standards.
• Identify, onboard, and manage privileged accounts across enterprise cloud platforms, with secure vaulting and robust access controls.
• Enable and operate advanced PAM capabilities including password auto-rotation, session monitoring and recording, just-in-time (JIT) access, and key and secrets management.
• Partner with cloud engineering, security operations, compliance, audit, and infrastructure teams to drive PAM adoption and integration, acting as the subject matter expert for privileged access.
• Ensure PAM controls meet regulatory, audit, and internal IAM/PAM standards - supporting audits with evidence collection, remediation, and improvements to PAM policies, standards, and procedures.
• Maintain documentation, SOPs, and operational runbooks, mentor junior PAM team members, and research emerging PAM, IAM, and cloud security capabilities to keep improving IG's security posture.

What You'll Need For This Role

• 5+ years of relevant cybersecurity experience, including 3 years hands-on with AWS PAM
• Hands-on experience implementing and operating Cloud PAM solutions across AWS, and/or GCP.
• Strong knowledge of cloud-native IAM/PAM services, Active Directory, and role-based access control.
• Experience with enterprise PAM platforms such as HashiCorp Vault or equivalent, including key and secrets management and JIT access frameworks.
• Proven delivery in cloud-first, enterprise-scale environments, comfortable operating at both strategic and hands-on technical levels.
• Strong documentation, communication, and stakeholder management skills.

Key Qualification Requirements

• Relevant security or cloud certifications are desirable (e.g., AWS Security).
• Experience supporting regulatory audits and compliance frameworks in a global enterprise, ideally financial services or a similarly regulated industry.

How We Work

We try to take a thoughtful approach to our ways of working as a company. We follow a hybrid working model with 3 days in the office - which we think balances the need to collaborate effectively and connect with each other. When it comes to how we deliver, there are 5 things we want everyone to do to drive high performance, better learning and career satisfaction:

• Lead and Inspire: Drives trust, alignment, and enthusiasm
• Think Big: Focus on the problems that most impact commercial outcomes
• Champion the client: Understand and prioritise client's needs
• Deliver at pace: Push for fast, sustainable growth;
• Raise the bar: Take ownership, be accountable and share feedback

We believe that diversity is vital to success, it fuels creativity, drives innovation and sets us up for global success. We're committed to building teams with a variety of perspectives and skills to help us realise our vision and strategy, that's why we encourage applications from people with diverse backgrounds and experiences to join us on this journey.

The Perks

Your growth fuels our success! Thrive with tailored development programs, mentoring opportunities with leaders, and clear career progression. Expand your network through committees, sports and social clubs. Enjoy extra time off for volunteering and community work.

• Matched giving for your fundraising activity
• Flexible working hours and work-from-home opportunities
• Performance-related bonuses
• Insurance and medical plans
• Career-focused technical and leadership training in-class and online, incl. unlimited access to LinkedIn Learning platform
• Contribution to gym memberships and more
• Free Lunch/Snacks
• A day off on your birthday
• Two days' volunteering leave per year.

Number of openings

1