About The Company
Our client is a globally established technology-driven organisation with an extensive international presence and operations across multiple regions, including APAC, EMEA and the US. The organisation operates in a highly technology-dependent environment, placing strong emphasis on IT security, operational excellence and enterprise-wide cybersecurity governance. With globally integrated IT functions, the company offers an opportunity to work alongside international teams on security infrastructure and critical technology initiatives
About The Job
We are seeking an experienced Senior Security Engineer (Privileged Access Management) to take ownership of the engineering, optimisation and operational support of the organisation's Privileged Access Management (PAM) ecosystem.
The successful candidate will play a key role in deploying, configuring and maintaining PAM solutions, particularly BeyondTrust Password Safe, while supporting privileged account migration, identity infrastructure integration and security incident resolution.
This position requires strong hands-on expertise in PAM technologies, Microsoft Active Directory and Microsoft Entra ID, alongside the ability to automate security operations through scripting and API integrations.
Key Responsibilities
- Deploy, configure and maintain Privileged Access Management solutions, particularly BeyondTrust Password Safe.
- Support the migration of legacy privileged accounts into the BeyondTrust vault and optimise existing PAM workflows.
- Manage integrations between BeyondTrust, Active Directory and Microsoft Entra ID, including OU structures, Group Policy Objects (GPOs) and Kerberos.
- Develop and deploy PowerShell or Python scripts using BeyondTrust REST APIs to automate bulk onboarding, password rotation and session monitoring alerts.
- Investigate, troubleshoot and resolve complex security incidents involving endpoint compromise and privilege escalation.
- Perform platform upgrades, patching, maintenance and regular health checks to ensure service reliability.
- Provide Level 3 escalation support for complex technical issues that cannot be resolved by Level 2 support.
- Provide technical guidance and mentorship to junior security analysts on PAM best practices and incident handling.
- Collaborate with global IT, cybersecurity and infrastructure teams to ensure effective service delivery.
About The Ideal Candidate
- Bachelor's Degree in Computer Science, Information Technology or a related discipline.
- Minimum 8 years of experience in Cybersecurity, with at least 3 years of dedicated Privileged Access Management experience.
- Strong hands-on experience with BeyondTrust Password Safe or equivalent PAM solutions such as CyberArk.
- Strong knowledge of Microsoft Entra ID (Azure AD) and on-premises Active Directory architecture.
- Advanced understanding of Kerberos, LDAP, GPO, Service Principals, Managed Identities and App Registrations.
- Experience participating in large-scale IAM/PAM migration projects, including tool-to-tool or on-premises-to-cloud migrations, is highly preferred.
- Experience in IT Service Management, security product ownership or service delivery within security-critical environments.
- Strong communication skills and the ability to collaborate effectively with international stakeholders.
- Previous experience supporting global environments across US, EMEA and APAC, including 24/7 operational environments, is preferred.
About The Manager/team
You will report directly to the Head of Workplace Operations & IT Security and work closely with a globally connected IT and Cybersecurity function.
The role involves close collaboration with internal stakeholders across IT Infrastructure, Cybersecurity, Enterprise Architecture, Major Incident Management, Call Centre and Site Services, as well as regional and global IT teams across APAC and other international locations.
This is an individual contributor position offering the opportunity to take technical ownership of critical PAM infrastructure while contributing to global security operations and continuous service improvement.