IDAM PAM Engineer

About the role

AVEVA is looking for a senior IDAM PAM Engineer to lead the design, automation and operation of privileged access management solutions across its Indian sites. The role combines deep technical expertise in PAM tools with a strong focus on automation, integration with SailPoint and support for CyberArk deployments.

Key responsibilities

• Design and engineer automation‑first PAM solutions, including onboarding of privileged user, service and application accounts.
• Lead implementation and expansion of CyberArk (or equivalent) components such as PAS, PSM and EPM.
• Integrate PAM with SailPoint for automated governance, lifecycle management and access reviews.
• Automate privileged access requests, approvals and provisioning through ServiceNow.
• Develop scripts and orchestration (PowerShell, Python, APIs) to reduce manual PAM operations.
• Produce architecture diagrams, runbooks and documentation, and support audit evidence automation.
• Act as senior escalation point for PAM incidents and collaborate with Security Architecture, Infrastructure and Audit teams.

Required profile

• Significant hands‑on experience with privileged access management, preferably CyberArk.
• Mandatory experience with SailPoint IGA platform.
• Strong background in Active Directory, Windows and Linux environments, and hybrid cloud (Azure).
• Proven ability to design and automate PAM at scale.
• Bachelor’s degree in Computer Science, Engineering or related field, or equivalent experience.

Required skills

• CyberArk (PAS, PSM, EPM) or equivalent PAM tools
• SailPoint
• PowerShell
• Python
• APIs and scripting for automation
• ServiceNow (or Jira) workflow automation
• Active Directory
• Azure cloud services
• Windows and Linux platforms
• DevOps pipeline security