Cloud PAM Engineer

Job Summary

As Cloud PAM Engineer, you will secure IG's privileged access across AWS, and GCP - designing, implementing, and continuously enhancing our Privileged Access Management capability, hands-on, at the pace our cloud footprint is growing.

Reporting to the PAM Manager, you will be the subject matter expert for privileged access in a cloud-first environment, translating technical risk into clear recommendations for architects, leaders, and cross-functional stakeholders. Your work directly reduces the risk of privileged account compromise, keeps IG audit-ready against regulatory and internal standards, and builds the automation that lets the business scale safely.

Responsibilities

• Lead the design, implementation, and ongoing enhancement of Cloud PAM solutions across AWS, and GCP, ensuring they are scalable, resilient, and aligned with enterprise architecture standards.
• Identify, onboard, and manage privileged accounts across enterprise cloud platforms, with secure vaulting and robust access controls.
• Enable and operate advanced PAM capabilities including password auto-rotation, session monitoring and recording, just-in-time (JIT) access, and key and secrets management.
• Partner with cloud engineering, security operations, compliance, audit, and infrastructure teams to drive PAM adoption and integration, acting as the subject matter expert for privileged access.
• Ensure PAM controls meet regulatory, audit, and internal IAM/PAM standards - supporting audits with evidence collection, remediation, and improvements to PAM policies, standards, and procedures.
• Maintain documentation, SOPs, and operational runbooks, mentor junior PAM team members, and research emerging PAM, IAM, and cloud security capabilities to keep improving IG's security posture.

Requirements

• 5+ years of relevant cybersecurity experience, including 3 years hands-on with AWS PAM
• Hands-on experience implementing and operating Cloud PAM solutions across AWS, and/or GCP.
• Strong knowledge of cloud-native IAM/PAM services, Active Directory, and role-based access control.
• Experience with enterprise PAM platforms such as HashiCorp Vault or equivalent, including key and secrets management and JIT access frameworks.
• Proven delivery in cloud-first, enterprise-scale environments, comfortable operating at both strategic and hands-on technical levels.
• Strong documentation, communication, and stakeholder management skills.

Qualifications

• Relevant security or cloud certifications are desirable (e.g., AWS Security).
• Experience supporting regulatory audits and compliance frameworks in a global enterprise, ideally financial services or a similarly regulated industry.

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.