PAM Engineer: Secure Privileged Access & Zero-Trust

PRIVASIA Technology Berhad; Port Klang; On-site; MYR 120,000 - 180,000; Full time

Job summary

PRIVASIA Technology Berhad is seeking a PAM Engineer to design, implement and support Privileged Access Management across the enterprise. You will secure privileged identities, accounts and sessions while aligning with ISO 27001, PCI-DSS, NIST and CIS controls.

The role emphasizes collaboration with engineers, managers and vendors, with strong focus on onboarding/offboarding, credential rotation and session monitoring.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, Cyber Security or related field.
• 3+ years in Identity and Access Management (IAM) or PAM.
• Hands-on with PAM platforms such as BeyondTrust, CyberArk or SecureKi.
• Experience with Active Directory, LDAP, Windows Server and Linux/Unix.
• Familiarity with Azure AD/Entra ID and security frameworks.

Responsibilities

• PAM Administration & Operations: deploy, configure, maintain PAM solutions and manage privileged accounts.
• Access Management: enforce least privilege, review access requests, monitor activity.
• Security & Compliance: ensure ISO 27001, PCI-DSS, NIST, CIS controls alignment.
• Technical Support & Troubleshooting: resolve authentication, vault, and privilege issues.
• Automation & Continuous Improvement: develop scripts and automate onboarding and rotations.

Skills

Identity & Access Management

PAM

Active Directory

LDAP

Windows/Linux Admin

PowerShell

Python

REST API

SIEM Integration

MFA & SSO

Education

Bachelor's Degree in CS/IT/Cyber Security

Tools

BeyondTrust

CyberArk

SecureKi

Job description

PRIVASIA Technology Berhad is seeking a PAM Engineer to design, implement and support Privileged Access Management across the enterprise. You will secure privileged identities, accounts and sessions while aligning with ISO 27001, PCI-DSS, NIST and CIS controls.

The role emphasizes collaboration with engineers, managers and vendors, with strong focus on onboarding/offboarding, credential rotation and session monitoring.