Experienced consultant to support clients in implementing and optimizing Digital Identity solutions across PAM, IAM, MFA, and directory services, involving requirements gathering, solution configuration, and advising on best-practice identity security.
Responsibilities
Work with clients to define requirements for PAM (Delinea), IAM (One Identity), MFA (Azure MFA & FortiAuthenticator), and Active Directory/DNS
Assess existing identity processes and recommend improvements
Develop Digital Identity strategies, architectures, and implementation plans
Configure and customize PAM, IAM, MFA, and AD/DNS solutions
Build and maintain identity policies—privileged access, authentication, authorization, and lifecycle management
The PAM Development SME will design, develop and enhance privileged access and identity management solutions that support secure and scalable access controls. The role is accountable for strengthening access governance through automation, integration and technology optimisation. The role will act as the technical authority for PAM platform development and access management engineering.
Responsibilities
Develop, configure and maintain PAM integrations with directories, MFA, ticketing systems, monitoring platforms and target systems
Automate onboarding of privileged accounts, credential rotation, account discovery and policy enforcement using scripts, APIs and platform capabilities
Customise workflows for approvals, just-in-time access, access expiry, session recording and privileged access request processes
Build and maintain connectors for databases, network devices, servers, cloud services, applications and other platforms as per the PAM roadmap
MUFG Investor Services is seeking an experienced PAM Administrator to join our Identity & Access Management (IAM) team, reporting to the Head of IAM & PAM. This is an exciting opportunity to play a key role in advancing the organization's Privileged Access Management (PAM) and broader Identity & Access Management (IAM) capabilities as we continue to strengthen our security posture and support strategic IAM initiatives across the enterprise.
Responsibilities
Design, implement, and support PAM solutions for privileged and non-privileged access across diverse user populations and target systems.
Develop, maintain, and optimize PAM operational processes, procedures, and policies.
Partner with Information Security teams to identify, assess, and mitigate PAM-related risks.
Collaborate with Cloud and Infrastructure teams to onboard and migrate local or unmanaged privileged access into approved PAM solutions.
Work closely with PAM vendors to enhance platform capabilities and drive continuous improvement.
Requirements
Nice to have: CyberArk Defender
Nice to have: CyberArk Sentry
Nice to have: Microsoft Azure Security Engineer (AZ-500)
Design, implement, and enhance TP ICAP's identity, access management, and privileged access capabilities, responsible for the engineering, integration, automation, and governance of identity services across on-premises, cloud, and SaaS environments.
Responsibilities
Manage and review user provisioning, deprovisioning, and access changes for internal systems, SaaS apps, and cloud platforms (e.g. AWS)
Maintain user and group roles in IAM tools (e.g. Delinea, AWS, CNAPP or similar)
Design, implement and maintain identity and access management solutions across on-premises, cloud, and SaaS platforms
Support periodic access reviews, certification campaigns, and policy enforcement
Help define and maintain role-based access controls (RBAC) and attribute-based access models
Lead the implementation, automation, and operational engineering of enterprise identity platforms, modernizing identity services across IGA, PAM, cloud identity, machine identities, and AI-agent identities while advancing Zero Trust and identity security capabilities.
Lead the team that protects how every employee, contractor, partner, application, and machine across Donaldson’s global business gains and uses access, owning the strategy, operations, and continuous improvement of identity platforms like SailPoint Identity Security Cloud and Microsoft Entra ID.
Compensation
Annual Salary Range: $148,880 - $186,100.
Responsibilities
Lead, coach, and grow a high-performing team of IAM engineers and analysts
Own the IAM strategy and multi-year roadmap aligned with Donaldson’s cybersecurity program, Zero Trust architecture, business priorities, and regulatory and customer requirements
Lead the operation and evolution of SailPoint Identity Security Cloud for identity governance and administration
Lead Microsoft Entra ID and the broader Microsoft identity stack
Strengthen privileged access management, least privilege, and just-in-time access for administrators, service accounts, cloud environments, and operational technology in manufacturing plants
Requirements
Bachelor’s degree in cybersecurity, computer science, information systems, or a related field
Nice to have: IAM leadership within global manufacturing
Nice to have: Privileged access management platforms (CyberArk, BeyondTrust, Delinea)
Nice to have: Securing identities for cloud and SaaS platforms (Azure, AWS, Microsoft 365)
Nice to have: Identity threat detection and response (Microsoft Defender for Identity)
The Networking Technical Services Specialist designs, implements and supports enterprise networking and security solutions for clients, combining hands-on technical delivery with customer engagement, complex troubleshooting and leadership across infrastructure transformation projects.
Responsibilities
Design, deploy and support LAN, WAN, wireless, SD-WAN, data centre, cloud connectivity and security solutions.
Lead customer implementations, migrations, upgrades and optimisation projects, minimising business disruption.
Configure and troubleshoot Cisco, Palo Alto, Fortinet, Aruba and F5 technologies; support privileged access management (PAM) solutions where required.
Conduct infrastructure assessments, health checks and gap analyses, and recommend practical improvements.
Investigate critical incidents, perform root cause analysis and coordinate vendor escalations.
Requirements
Bachelor’s degree in Computer Science, Information Technology, Telecommunications, Electronics Engineering or a related field
Lead and mentor PAM engineers and administrators, design and implement enterprise privileged access management strategy, architecture, and operational processes.
Compensation
$112,000 - $179,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual’s experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.
Responsibilities
Lead and mentor PAM engineers and administrators
Lead the development and implementation of enterprise PAM strategy, architecture, standards, and operational processes
Manage the lifecycle of privileged accounts, including discovery, onboarding, credential vaulting, rotation, access provisioning, and deprovisioning
Establish and maintain controls for privileged credential storage, session management, privileged session recording, and just-in-time access
Develop and enforce least-privilege principles for administrative, root, domain, database, network, cloud, and application accounts
well curated bouquet of rewards and recognition program
Inclusive Health Benefits for all - Medical Insurance, Personal Accidental, Group Term Life Insurance and Annual Health Checkup, Dental and OPD benefits
The base salary range for this job is: New York City, Boston, and Washington DC Metro Areas, Washington State, and Southern California offices – $173,900 to $290,100
Bay Area California offices – $181,200 to $302,100
All other offices locations in the US, including Sacramento – $144,900 to $265,800
Responsibilities
Implement and support IAM capabilities including IGA, PAM, SSO, MFA, directory services, federation, and identity lifecycle management
Design and integrate IAM and PAM platforms with cloud, SaaS, and enterprise applications
The base salary range for this job is: New York City, Boston, and Washington DC Metro Areas, Washington State, and Southern California offices – $185,800 to $385,700 Bay Area California offices – $193,500 to $401,600 All other offices locations in the US, including Sacramento – $154,700 to $353,500
Responsibilities
Define and execute enterprise IAM strategy, target-state architecture, roadmaps, standards, and transformation programs.
Architect and lead implementations spanning Identity Governance & Administration (IGA), Privileged Access Management (PAM), Single Sign-On (SSO), Multi-Factor Authentication (MFA), Customer IAM (CIAM), and directory services.
Design governance and access controls for non-human identities, including service accounts, APIs, workloads, bots, autonomous AI agents, and agent-to-agent interactions.
Establish identity patterns for AI agents covering registration, authentication, authorization, least privilege, delegated authority, credential and secret management, monitoring, revocation, and lifecycle governance.
Embed Identity Threat Detection and Response (ITDR), Cloud Infrastructure Entitlement Management (CIEM), passwordless authentication, adaptive access, and identity analytics into the architecture.
Requirements
Nice to have: IAM platforms: SailPoint, Saviynt, Microsoft Entra ID, Okta, Ping Identity, ForgeRock, CyberArk, Delinea, and BeyondTrust
Nice to have: Cloud and standards: Microsoft Azure, AWS, Google Cloud, SAML, OAuth 2.0, OpenID Connect, SCIM, LDAP, PKI, and policy-based authorization
Nice to have: Innovative identity capabilities: AI security, agentic AI governance, AI-agent identity management, non-human identity management, machine identity, secrets management, ITDR, CIEM, identity analytics, and access intelligence
Nice to have: Engineering and automation: REST APIs, Infrastructure as Code, Terraform, CI/CD integration, and policy-as-code
Privileged Access Management (PAM) Identity LeadPeraton · Remote