Senior Privileged Access Management (PAM) Specialist

Role Overview

Reporting to the Endpoint Security Manager, we are looking for a candidate to join the Endpoint Security team as a Subject Matter Expert for Privilege Identity Management solutions.  The Endpoint Security team report to the Head of Security Operations, providing security services to the European group of companies. The Senior Security specialist will report to the Endpoint Security Manager within Central Security Services. 

This role would suit an experienced technologist with a strong background in privileged access management, who can draw on a wealth of knowledge and experience, to help secure the business.

This position is to manage the optimisation, integration & customisation of Privileged Access Management (PAM) technologies within the Endpoint Security Team.  Focus on continuous improvement and to seek opportunities to exceed expectations.

Team Background

The Endpoint Security Team sits within our Central Security Services department and reports to the Head of Security Operations. This team has oversight/responsibility for:

• Antivirus
• Endpoint Detection and Response (EDR)
• Security Incident Event Monitoring (SIEM)
• Privileged Access Management (PAM)
• Database Security
• Endpoint Security Metrics & KPI’s
• Endpoint Security Strategy & Roadmaps

In this role you will be responsible for:

• Providing full lifecycle management of the Privileged Access Management Suite and ensuring their continued operation in accordance with service levels and stated functionality. This includes:
• Design, build, deploy and maintain all components of the PAM solution.
• Version upgrades and patching of a large/complex environment.
• Managing and implementing the schedule of change.
• Periodic DR and Failover testing.
• Seek opportunities to automate, improve the service and productivity. 
• Support and develop team members’ skills, mentor, and coach junior engineers on the PAM solution. 
• Production of quality documentation and training material.
• The main point of contact and the highest escalation point to the PAM service.
• Ensure adherence with risk management programmes.
• Key participant in Critical Incident Response Team for major incidents 
• Security Infrastructure Capacity Planning & Management for the PAM service.
• Attend project meetings and maintain strong relationships.
• Identify opportunities or emerging demands and plan for them.
• Ensure that business risks are identified, and adequate controls are in place

What you will bring to the role:

• Third level qualification in Information Security or IT, or equivalent work or education-related experience preferable.
• Ideally five years’ experience in an IT Security industry role and ten plus years’ experience in the IT industry.
• Demonstrable Experience with Privileged Access Management Solutions.
• Good experience in Network and Endpoint Defence strategies.
• Ability to deal with complex issues and ambiguous situations – dealing with multiple systems and multiple features.
• Ability to Design, build and implement components of the technical infrastructure using an advanced and in-depth knowledge of the technology and be a resource for other technologists, Architects and CSS management.
• Advanced technical troubleshooting skills, particularly in the windows environment. Experience with failover clusters, disaster recover, backup & restore, patching and server hardening. 
• Owns the resolution of incidents and problems. Acts as lead technologist. Runs meetings / workshops to drive out problems, etc. Ensures that solutions arrived at are comprehensive and of high quality. Provides direction and leadership.
• Have an ability to identify key influencers and build strong relationships with them.
• Provides leadership to and advises, coaches and mentor’s less senior staff.
• Knowledge of information security and risk control frameworks such as COBiT, ISO 27001, ISO 27002, GDPR, OWASP.
• Recognized certifications desired such as Security +, Certified Information Systems Security Professional (CISSP), PAM Vendor certificates, SAN’s certificates etc.
   

Key Competencies