Senior PAM Security Engineer

About the role

Experian is seeking a Senior Security Engineer with deep expertise in Privileged Access Management (PAM) to support its global PAM programs. You will work with CyberArk and other PAM solutions to deliver secure, scalable, and compliant access controls across on‑premises and cloud environments.

Key responsibilities

• Analyze consolidated data from multiple sources, resolve conflicts, and translate high‑level requirements into technical work plans.
• Expand PAM capabilities by developing new features and automation to drive IAM transformation.
• Diagnose and perform root‑cause analysis on complex PAM issues, ensuring minimal disruption.
• Maintain system health, apply patches, and support vulnerability remediation for both cloud and on‑prem PAM systems.
• Recommend technical adjustments to meet evolving business and compliance needs.
• Ensure high availability of IAM/PAM services through proactive maintenance and incident response.
• Provide on‑call support as part of a rotating schedule.
• Implement and support compliance activities aligned with internal policies and external regulations.

Required profile

• 5+ years of hands‑on experience with IAM and PAM technologies (CyberArk preferred, BeyondTrust or Delinea acceptable).
• Proven cloud PAM experience with AWS, Azure, or GCP.
• Strong knowledge of Active Directory, Azure AD, LDAP, and authentication/authorization protocols in hybrid environments.
• Expertise in Windows and Linux/UNIX administration, especially securing UNIX systems with PAM tools.
• Solid understanding of networking protocols (TCP/IP) and integration challenges.
• Familiarity with security frameworks and compliance standards such as NIST, ISO 27001, SOX, and modern PAM best practices.
• Knowledge of incident‑response lifecycle and experience working in Agile environments.
• Experience with DevOps practices and Infrastructure‑as‑Code tooling.

Required skills

• CyberArk, BeyondTrust, Delinea
• AWS, Azure, GCP
• Active Directory, Azure AD, LDAP
• Windows OS, Linux/UNIX administration
• TCP/IP networking
• NIST, ISO 27001, SOX compliance
• Agile methodology
• DevOps, Infrastructure‑as‑Code (IaC)