Privilege Access Management (PAM) Engineer

PRIVASIA Technology Berhad; Port Klang; On-site; MYR 120,000 - 180,000; Full time

Job summary

PRIVASIA Technology Berhad is seeking a PAM Engineer to design, implement and support Privileged Access Management across the enterprise. You will secure privileged identities, accounts and sessions while aligning with ISO 27001, PCI-DSS, NIST and CIS controls.

The role emphasizes collaboration with engineers, managers and vendors, with strong focus on onboarding/offboarding, credential rotation and session monitoring.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, Cyber Security or related field.
• 3+ years in Identity and Access Management (IAM) or PAM.
• Hands-on with PAM platforms such as BeyondTrust, CyberArk or SecureKi.
• Experience with Active Directory, LDAP, Windows Server and Linux/Unix.
• Familiarity with Azure AD/Entra ID and security frameworks.

Responsibilities

• PAM Administration & Operations: deploy, configure, maintain PAM solutions and manage privileged accounts.
• Access Management: enforce least privilege, review access requests, monitor activity.
• Security & Compliance: ensure ISO 27001, PCI-DSS, NIST, CIS controls alignment.
• Technical Support & Troubleshooting: resolve authentication, vault, and privilege issues.
• Automation & Continuous Improvement: develop scripts and automate onboarding and rotations.

Skills

Identity & Access Management

PAM

Active Directory

LDAP

Windows/Linux Admin

PowerShell

Python

REST API

SIEM Integration

MFA & SSO

Education

Bachelor's Degree in CS/IT/Cyber Security

Tools

BeyondTrust

CyberArk

SecureKi

Job description

We require a PAM engineer with proven experience working in a fast pace environment. This ideal candidate should possess strong communication and stakeholder management skills, with the ability to effectively collaborate with engineers, managers, business users and external vendors.

Job Description

The PAM Engineer is responsible for the design, implementation, administration, maintenance, and support of Privileged Access Management (PAM) solutions. The role focuses on securing privileged identities, accounts, credentials, and sessions across the enterprise environment. The successful candidate will ensure compliance with cybersecurity policies, regulatory requirements, and industry best practices while reducing risks associated with privileged access.

Key Responsibilities:-

PAM Administration & Operations

• Deploy, configure, and maintain PAM solutions.
• Manage privileged accounts, shared accounts, service accounts, and administrative credentials.
• Configure password vaulting, credential rotation, session recording, and privileged session monitoring.
• Perform onboarding and offboarding of privileged accounts and systems.

Access Management

• Implement and enforce least-privilege and zero-trust security principles.
• Review and approve privileged access requests based on business requirements.
• Monitor privileged activities and investigate suspicious access attempts.
• Integrate PAM with Active Directory, LDAP and other identity platforms.

Security & Compliance

• Ensure compliance with policies, standards, and regulatory requirements such as ISO 27001, PCI-DSS, NIST, and CIS Controls.
• Support audit activities and provide PAM-related reports and evidence.
• Perform regular access reviews and recertification exercises.
• Identify and mitigate privileged access risks.

Technical Support & Troubleshooting

• Troubleshoot authentication, vault, and privilege elevation issues.
• Support PAM infrastructure upgrades, patches, and migration activities.
• Work with infrastructure, network, and application teams to integrate systems with PAM.
• Maintain system availability and performance.

Automation & Continuous Improvement

• Develop scripts and automation workflows
• Automate account onboarding, password rotations, and compliance reporting.
• Recommend security enhancements and PAM optimization initiatives and continues improvement.

Required Qualifications

• Bachelor's Degree in Computer Science, Information Technology, Cyber Security, or related field.
• 3+ years of experience in Identity and Access Management (IAM) or PAM.
• Hands-on experience with PAM platforms such as: BeyondTrust, Secureki, Cyberark or any
• Experience with:
• Active Directory
• LDAP
• Windows Server (RDS server, PAM appliance)
• Linux/Unix
• Azure AD / Entra ID
• Understanding of security frameworks and best practices.

Preferred Certifications

• Microsoft Certified: Identity and Access Administrator Associate
• CISSP
• CISM
• CompTIA Security+
• ITIL Foundation

Technical Skills

• PAM Solution Administration
• Identity & Access Management (IAM)
• Active Directory & Group Policy
• Windows and Linux Administration
• PowerShell, Python, REST API
• SIEM Integration
• 2FA or MFA and SSO Authentication.
• Network Security Fundamentals

Soft Skills

• Strong analytical and troubleshooting skills.
• Effective communication and stakeholder management.
• Ability to work under pressure and handle security incidents.
• Strong documentation and reporting skills.

Key Performance Indicators (KPIs)

• Privileged accounts onboarded to PAM.
• Password rotation compliance rate.
• Number of privileged access violations.
• Audit findings related to privileged access.
• PAM platform availability and uptime.
• Incident response and resolution time.