Cloud PAM Engineer

Overview

Cloud PAM Engineer responsible for securing privileged access across AWS and GCP by designing, implementing, and improving IG’s Privileged Access Management (PAM) capability.

What you'll do

• Design, implement, and continuously enhance Cloud PAM solutions across AWS and GCP.
• Identify, onboard, and manage privileged accounts with secure vaulting and access controls.
• Enable and operate PAM capabilities such as password auto-rotation, session monitoring/recording, JIT access, and key/secrets management.
• Partner with cloud engineering, security operations, compliance, audit, and infrastructure to integrate PAM adoption.
• Ensure PAM controls meet regulatory, audit, and internal IAM/PAM standards, including evidence collection and remediation.
• Maintain documentation, SOPs, and runbooks; mentor junior PAM team members.

What you'll need

• 5+ years of relevant cybersecurity experience.
• 3 years hands-on experience with AWS PAM.
• Hands-on experience implementing and operating Cloud PAM solutions across AWS and/or GCP.
• Knowledge of cloud-native IAM/PAM services, Active Directory, and role-based access control.
• Experience with enterprise PAM platforms such as HashiCorp Vault (or equivalent), including key/secrets management and JIT access frameworks.
• Experience supporting regulatory audits and compliance frameworks in a global enterprise (ideally financial services).

Details

• Location: Bangalore, India.
• Hybrid working model with 3 days in the office.
• Reports to the PAM Manager.
• Number of openings: 1.