Cloud PAM Engineer

Description

The bar is high – bring a curious and forward-thinking mindset and we'll give you the platform to define what comes next. Join us at IG – the future gets built here.

The Perks

• Matched giving for your fundraising activity

• Flexible working hours and work-from-home opportunities

• Performance-related bonuses

• Insurance and medical plans

• Career-focused technical and leadership training in-class and online, incl. unlimited access to LinkedIn Learning platform

• Contribution to gym memberships and more

• Free Lunch/Snacks

• A day off on your birthday

• Two days’ volunteering leave per year.

How we work

• Lead and Inspire: Drives trust, alignment, and enthusiasm

• Think Big: Focus on the problems that most impact commercial outcomes

• Champion the client: Understand and prioritise client's needs

• Deliver at pace: Push for fast, sustainable growth;

• Raise the bar: Take ownership, be accountable and share feedback

Key Qualification Requirements:

• Relevant security or cloud certifications are desirable (e.g., AWS Security).

• Experience supporting regulatory audits and compliance frameworks in a global enterprise, ideally financial services or a similarly regulated industry.

What you’ll do

• Lead the design, implementation, and ongoing enhancement of Cloud PAM solutions across AWS, and GCP, ensuring they are scalable, resilient, and aligned with enterprise architecture standards.

• Identify, onboard, and manage privileged accounts across enterprise cloud platforms, with secure vaulting and robust access controls.

• Enable and operate advanced PAM capabilities including password auto-rotation, session monitoring and recording, just-in-time (JIT) access, and key and secrets management.

• Partner with cloud engineering, security operations, compliance, audit, and infrastructure teams to drive PAM adoption and integration, acting as the subject matter expert for privileged access.

• Ensure PAM controls meet regulatory, audit, and internal IAM/PAM standards – supporting audits with evidence collection, remediation, and improvements to PAM policies, standards, and procedures.

• Maintain documentation, SOPs, and operational runbooks, mentor junior PAM team members, and research emerging PAM, IAM, and cloud security capabilities to keep improving IG's security posture.

What you’ll need for this role

• 5+ years of relevant cybersecurity experience, including 3 years hands-on with AWS PAM

• Hands-on experience implementing and operating Cloud PAM solutions across AWS, and/or GCP.

• Strong knowledge of cloud-native IAM/PAM services, Active Directory, and role-based access control.

• Experience with enterprise PAM platforms such as HashiCorp Vault or equivalent, including key and secrets management and JIT access frameworks.

• Proven delivery in cloud-first, enterprise-scale environments, comfortable operating at both strategic and hands-on technical levels.

• Strong documentation, communication, and stakeholder management skills.