Cloud PAM Engineer

ig; Bengaluru; Hybrid; INR 1,400,000 - 1,900,000; Full time

Job summary

IG Group in Bengaluru, India, is hiring a Cloud PAM Engineer to secure privileged access across AWS and GCP in a cloud-first setting. You will design, implement, and enhance PAM capabilities, translating technical risk into actionable guidance for architects and leaders.

You will collaborate with cloud engineering, security operations, compliance and audit teams to keep IG audit-ready, automate PAM processes, and scale controls as the multi-cloud footprint grows.

Qualifications

• 5+ years of relevant cybersecurity experience.
• 3 years hands-on with AWS PAM.
• Experience implementing and operating Cloud PAM across AWS and/or GCP.
• Strong knowledge of cloud-native IAM/PAM services, Active Directory, and RBAC.
• Experience with enterprise PAM platforms such as HashiCorp Vault or equivalent.
• Proven delivery in cloud-first, enterprise-scale environments.
• Strong documentation, communication, and stakeholder management skills.

Responsibilities

• Lead the design, implementation, and ongoing enhancement of Cloud PAM solutions across AWS and GCP.
• Identify, onboard, and manage privileged accounts across enterprise cloud platforms.
• Enable and operate PAM capabilities including password auto-rotation, session monitoring and recording, JIT access, and secrets management.
• Partner with cloud engineering, security operations, compliance, audit, and infrastructure teams to drive PAM adoption and integration.
• Ensure PAM controls meet regulatory, audit, and internal IAM/PAM standards with evidence collection and improvements to policies.
• Maintain documentation, SOPs, and runbooks, mentor junior PAM team members, and research emerging PAM/IAM/cloud security capabilities.

Skills

Cloud PAM

AWS PAM

GCP

RBAC

HashiCorp Vault

Just-in-time access

Secrets management

Automation

Tools

HashiCorp Vault

Job description

Job Title Cloud PAM Engineer Job Description

So, who are we? IG Group is a FTSE 100 fintech operating across five continents, serving over 1.3m customers and handling billions of dollars in transactions - built on scale, trust, and proof. We didn't pivot to innovation; it's how we've always operated. What that means for the people who work here is real: genuinely complex problems to solve, the technology and resources to tackle them properly, and the kind of scope that's rare in established businesses.

The bar is high - bring a curious and forward-thinking mindset and we'll give you the platform to define what comes next. Join us at IG - the future gets built here.

Your team

This role sits within IG's Cybersecurity function, as part of the wider IAM and PAM team. We own the controls that protect privileged access across a fast-growing, multi-cloud estate, partnering daily with cloud engineering, security operations, compliance, and audit as IG scales its cloud-first environment.

Your role in the Team's Success

As Cloud PAM Engineer, you will secure IG's privileged access across AWS, and GCP - designing, implementing, and continuously enhancing our Privileged Access Management capability, hands‑on, at the pace our cloud footprint is growing. Reporting to the PAM Manager, you will be the subject matter expert for privileged access in a cloud‑first environment, translating technical risk into clear recommendations for architects, leaders, and cross‑functional stakeholders. Your work directly reduces the risk of privileged account compromise, keeps IG audit‑ready against regulatory and internal standards, and builds the automation that lets the business scale safely.

What you'll do

• Lead the design, implementation, and ongoing enhancement of Cloud PAM solutions across AWS, and GCP, ensuring they are scalable, resilient, and aligned with enterprise architecture standards.
• Identify, onboard, and manage privileged accounts across enterprise cloud platforms, with secure vaulting and robust access controls.
• Enable and operate advanced PAM capabilities including password auto‑rotation, session monitoring and recording, just‑in‑time (JIT) access, and key and secrets management.
• Partner with cloud engineering, security operations, compliance, audit, and infrastructure teams to drive PAM adoption and integration, acting as the subject matter expert for privileged access.
• Ensure PAM controls meet regulatory, audit, and internal IAM/PAM standards - supporting audits with evidence collection, remediation, and improvements to PAM policies, standards, and procedures.
• Maintain documentation, SOPs, and operational runbooks, mentor junior PAM team members, and research emerging PAM, IAM, and cloud security capabilities to keep improving IG's security posture.

What you'll need for this role

• 5+ years of relevant cybersecurity experience, including 3 years hands‑on with AWS PAM
• Hands‑on experience implementing and operating Cloud PAM solutions across AWS, and/or GCP.
• Strong knowledge of cloud‑native IAM/PAM services, Active Directory, and role‑based access control.
• Experience with enterprise PAM platforms such as HashiCorp Vault or equivalent, including key and secrets management and JIT access frameworks.
• Proven delivery in cloud‑first, enterprise‑scale environments, comfortable operating at both strategic and hands‑on technical levels.
• Strong documentation, communication, and stakeholder management skills.

Key Qualification Requirements:

• Relevant security or cloud certifications are desirable (e.g., AWS Security).
• Experience supporting regulatory audits and compliance frameworks in a global enterprise, ideally financial services or a similarly regulated industry.

How we work

We try to take a thoughtful approach to our ways of working as a company. We follow a hybrid working model with 3 days in the office - which we think balances the need to collaborate effectively and connect with each other . When it comes to how we deliver, there are 5 things we want everyone to do to drive high performance, better learning and career satisfaction:

• Lead and Inspire: Drives trust, alignment, and enthusiasm
• Think Big: Focus on the problems that most impact commercial outcomes
• Champion the client: Understand and prioritise client's needs
• Deliver at pace: Push for fast, sustainable growth;
• Raise the bar: Take ownership, be accountable and share feedback

We believe that diversity is vital to success, it fuels creativity, drives innovation and sets us up for global success. We're committed to building teams with a variety of perspectives and skills to help us realise our vision and strategy, that's why we encourage applications from people with diverse backgrounds and experiences to join us on this journey. Learn more about our D&I approach here .

The Perks

Your growth fuels our success! Thrive with tailored development programs, mentoring opportunities with leaders, and clear career progression. Expand your network through