About the Company

We are a security-focused organisation committed to protecting critical business systems, sensitive information, and privileged technology environments. Our cybersecurity team works to reduce unauthorised access, strengthen administrative controls, and improve accountability across infrastructure and business applications.

We are seeking an IAM Engineer specialising in Privileged Access Management to implement and maintain secure controls for administrator accounts, service accounts, and other high-risk identities.

Role Overview

The IAM Engineer will design, operate, and improve privileged access controls across servers, databases, cloud platforms, network infrastructure, and enterprise applications. The role will focus on privileged credential protection, secure administrative access, session monitoring, and the implementation of least-privilege principles.

The successful candidate will work closely with infrastructure, cloud engineering, IT operations, and security teams to reduce privileged account risks and support compliance requirements.

Key Responsibilities

• Implement and administer PAM solutions such as CyberArk, BeyondTrust, Delinea, or comparable platforms.
• Manage privileged accounts, shared administrative credentials, service accounts, and emergency access accounts.
• Configure credential vaulting, password rotation, access approval workflows, and privileged session recording.
• Integrate privileged access controls with enterprise directories, identity providers, and authentication systems.
• Implement just-in-time access and least-privilege controls where supported by the environment.
• Review privileged account inventories and identify unmanaged, excessive, or unnecessary access rights.
• Support secure onboarding of servers, databases, cloud workloads, network devices, and critical applications into PAM platforms.
• Investigate privileged authentication failures, credential management issues, and suspicious administrative activity.
• Develop scripts and automation for account discovery, credential rotation, access provisioning, and compliance reporting.
• Support periodic privileged access reviews, internal audits, and evidence collection.
• Maintain PAM architecture documentation, operating procedures, and incident response guidance.
• Recommend improvements to privileged identity security based on emerging threats and operational findings.

Requirements and Qualifications

• Bachelor’s degree in Information Security, Computer Science, Information Technology, or equivalent experience.
• At least 3 years of experience in IAM, PAM, infrastructure security, or enterprise systems administration.
• Practical experience with one or more PAM platforms, such as CyberArk, BeyondTrust, or Delinea.
• Strong understanding of privileged accounts, credential vaulting, password rotation, session management, and access approval workflows.
• Experience with Active Directory, Microsoft Entra ID, Linux, Windows Server, or enterprise infrastructure.
• Knowledge of service account security, secrets management, and privileged access risks.
• Familiarity with scripting using PowerShell, Python, or Bash.
• Understanding of MFA, RBAC, least privilege, and segregation of duties.
• Ability to troubleshoot complex technical issues and document security controls.
• Relevant PAM, Microsoft, or cybersecurity certifications are advantageous.

What We Offer

• Fully remote work arrangements within the agreed employment eligibility area.
• Competitive compensation reflecting experience and technical specialisation.
• Opportunities to work on enterprise-grade privileged access security initiatives.
• Support for professional development, training, and relevant certifications.
• Collaboration with experienced cybersecurity and infrastructure professionals.
• Opportunities to contribute to access governance and security architecture improvements.
• Paid annual leave and other benefits in accordance with company policy and applicable employment requirements.

Application Instructions

Please submit your CV detailing your PAM experience, privileged account management responsibilities, platform implementations, and automation capabilities. Include examples of PAM deployments, credential security improvements, or privileged access reviews you have supported, without sharing confidential client or employer information.

Shortlisted candidates may be invited to a technical interview covering PAM architecture, privileged account security, and practical troubleshooting scenarios.

Are you interested in this position?

Apply by clicking on the “Apply Now” Button below!

#JobsHubEstonia #GlobalRecruitment
#CareerOpportunities #HiringNow
#JobSeekersNetwork #EstoniaJobs
#RecruitmentServices #EmploymentPortal.