IDAM PAM Engineer

About the role

AVEVA is looking for a senior IDAM PAM Engineer to design, build and operate automated privileged access management solutions across its UK sites. The role combines deep technical expertise in PAM platforms with a strong focus on automation and integration with SailPoint and ServiceNow.

Key responsibilities

• Lead the automation‑first design and engineering of PAM solutions, including CyberArk or equivalent.
• Develop fully automated onboarding for privileged user, service, and application accounts, as well as credentials, secrets and keys.
• Integrate PAM with SailPoint to enable automated governance, lifecycle management and access reviews.
• Define PAM standards, onboarding patterns and automation frameworks, producing architecture diagrams, runbooks and documentation.
• Automate privileged access requests, approvals and provisioning via ServiceNow.
• Build automated reporting for audits and compliance, reducing manual operations through scripting and orchestration.
• Secure privileged access across Active Directory, Windows and Linux platforms, Azure cloud services, applications and DevOps pipelines.
• Act as senior escalation point for PAM‑related incidents and partner with Security Architecture and Audit teams on control design.

Required profile

• Significant hands‑on experience in Privileged Access Management and automation at scale.
• Senior technical authority capable of defining standards and guiding cross‑functional teams.
• Proven ability to support audits with automated evidence and reporting.
• Strong understanding of privileged access risks, threat vectors and hybrid identity environments.

Required skills

• SailPoint (mandatory)
• CyberArk (PAS, PSM, EPM) or equivalent PAM tools
• PowerShell scripting
• Python programming
• API integration
• Active Directory administration
• Azure cloud services
• ServiceNow workflow automation
• Jira (optional)
• Windows and Linux operating systems