Lead PAM Engineer (CyberArk / IAM)

Location: Hybrid, London, United Kingdom

Company

hirify.global provides fund administration, banking, payments, custody, financing, foreign exchange, and related operational services for alternative investment funds as part of Mitsubishi UFJ Financial Group.

What you will do

• Design, implement, support, and optimize PAM solutions for privileged and non-privileged access across users and target systems.
• Develop PAM operational processes, procedures, policies, and governance controls.
• Collaborate with Information Security, Infrastructure, Cloud, Operations, and IAM stakeholders to mitigate risk and onboard unmanaged privileged access.
• Provide global operational support for PAM platforms, including on-call participation, and work with PAM vendors on continuous improvement.
• Support IAM and IGA implementations and operations, including Endpoint Privilege Management across endpoints and servers.
• Lead IAM/PAM audit, compliance, and regulatory review activities.

Requirements

• 7+ years of experience in PAM operations and engineering.
• Strong expertise in PAM concepts, technologies, operational processes, and governance, with independent enterprise PAM platform management experience.
• Hands-on experience with IAM and IGA solutions and working knowledge of authentication, federation, and identity lifecycle management.
• Experience with at least one enterprise PAM platform, including CyberArk, Delinea, or BeyondTrust.
• Hands-on experience with Azure or AWS IAM/PAM capabilities.
• Strong working knowledge of Active Directory and LDAP-based identity management, plus Azure AD, AWS, and cloud identity services.
• Experience implementing and supporting at least one Endpoint Privilege Management solution.
• Experience managing privileged access across infrastructure, operating systems, databases, and cloud environments.
• Strong understanding of IAM/PAM audit, compliance, and security controls, with excellent communication, stakeholder management, and collaboration skills.
• Experience supporting globally distributed, business-critical environments.

Nice to have

• PAM certifications such as CyberArk Defender or CyberArk Sentry.
• Cloud security certifications such as Microsoft Azure Security Engineer (AZ-500) or AWS Certified Security Specialty.

Culture & Benefits

• Hybrid working environment.
• Connected culture focused on innovation and client service.
• Opportunity to work within a global financial group operating across 17 locations.
• Equal opportunity employer with responsible use of AI in recruitment.