Senior PAM Security Engineer

About the role

Experian, a global data and technology company, is hiring a Senior Security Engineer specializing in Privileged Access Management (PAM) to support its global PAM programs. You will work with CyberArk and other PAM technologies to deliver secure, scalable and compliant solutions across on-premises and cloud environments, covering system availability, vulnerability management, OS and application support and compliance agreements.

Key responsibilities

• Analyze consolidated data from multiple sources, resolve conflicts and turn high-level information into technical work plans.
• Expand PAM capabilities by developing new features and automation, and implement new PAM capabilities while supporting production systems and keeping internal documentation up to date.
• Diagnose and perform root cause analysis on complex PAM platform issues, keeping disruption minimal.
• Maintain system health, apply patches and support vulnerability remediation for PAM systems in cloud and on-premises environments.
• Recommend technical improvements and ensure high availability of IAM/PAM systems through proactive maintenance and incident response.
• Provide on-call support on a rotating schedule and implement and support compliance activities aligned with internal policies and external regulations.
• Collaborate with Cybersecurity, service desk, systems engineering, network security, audit, application development and infrastructure teams.

Required profile

• 5+ years of hands-on experience in IAM and PAM technologies, including CyberArk (preferred), BeyondTrust or Delinea.
• Cloud PAM experience with AWS, Azure or GCP is required.
• Knowledge of the Incident Response lifecycle and experience with Agile methodologies.
• Experience with DevOps and Infrastructure as Code tools, including Terraform, is required.
• Proficiency in scripting languages such as PowerShell, Python or Ansible, with hands-on automation experience.
• Bonus: experience with CyberArk EPM and Delinea's Centrify.

Required skills

• Working knowledge of IAM concepts such as Active Directory, Azure AD, LDAP and authentication/authorization protocols in hybrid environments.
• Proficiency with Windows and Linux administration, especially securing UNIX systems and integrating with PAM tools.
• Solid understanding of networking protocols such as TCP/IP.
• Familiarity with security frameworks and compliance standards such as NIST, ISO 27001 and SOX.