Employment Type
Permanent
Closing Date
5 Oct 2026 11:59pm
Job Title
Senior Security Engineer - Privileged Access Management
Job Summary
Job Description
The Role
You’ll work on meaningful security challenges that protect critical systems and improve how teams safely access privileged environments. You’ll have the opportunity to shape standards, influence technical direction and make measurable improvements to security outcomes at scale.
As a Senior Security Engineer, you will shape how privileged access is designed, governed and secured across our complex enterprise and cloud environments.
This is a strategic engineering role for someone who can set direction, influence architecture and reduce risk through secure-by-design patterns, automation and strong technical leadership.
What you’ll do
- Lead the PAM domain strategy, target-state architecture and control roadmap across on-prem, cloud, SaaS and hybrid environments.
- Design secure, scalable privileged access and secrets management patterns that support modern engineering, DevSecOps and automation practices.
- Drive a high-automation PAM operating model for onboarding, access requests/approvals, vaulting, rotation, session recording, and offboarding via APIs, workflows, and infrastructure-as-code.
- Influence engineering, architecture, operations, risk and vendor teams to embed PAM controls early and effectively.
- Improve detection, auditability and assurance through quality logging, reusable evidence, access reviews and automated reporting.
- Mentor others, uplift technical capability and help build a culture of shared security ownership.
What you’ll bring
- Deep experience in Privileged Access Management, secrets management, identity security or adjacent security engineering domains.
- Strong understanding of Zero Trust, least privilege, service accounts, privileged identities and modern cloud security patterns.
- Hands-on familiarity with PAM platforms such as CyberArk, BeyondTrust or cloud-native privileged access capabilities.
- Experience integrating security tooling with identity providers, MFA, SIEM/SOAR, ticketing, monitoring, APIs or infrastructure-as-code.
- The ability to translate complex technical risk into clear recommendations for technical and non-technical stakeholders.