We are looking for a Principal Privileged Access Management Engineer to design, operate, and continuously improve Privileged Access Management (PAM) services across integral hybrid environments.

In this role, you will act as a technical subject matter expert within a global cybersecurity team, ensuring the reliability, security, and scalability of PAM services for both human and non-human identities. You will work hands-on with privileged access, vaulting, session management, authentication, access governance, and automation, while providing advanced support and translating security requirements into scalable, secure-by-design solutions.

TASKS & RESPONSIBILITIES ?:

- Design, implement, operate, and continuously improve PAM solutions and integrations across global environments.
- Manage privileged accounts, secure vaulting, session control, authentication flows, and privileged access workflows.
- Act as a subject matter expert on PAM technologies, architecture, integrations, and privileged access security.
- Provide 2nd and 3rd level support for global PAM services and troubleshoot complex system, authentication, and integration issues.
- Support critical incidents and contribute to continuous service improvement and operational efficiency.
- Drive improvements in privileged access governance, automation, monitoring, and standardization.
- Translate business and cybersecurity requirements into secure, scalable PAM solutions and enhancements.
- Contribute to or lead initiatives and projects related to access control and identity security.
- Collaborate with IT teams and stakeholders to improve the security, efficiency, and usability of privileged access processes.
- Develop and maintain automation and operational solutions using scripting.
- Support secure architecture and design decisions aligned with cybersecurity and infrastructure standards.




- Maintain clear and up-to-date technical documentation, procedures, and operational knowledge.
- Support knowledge transfer, training, and operational readiness across global teams.

SKILLS ?:

• 5+ years of experience in PAM, IAM, Cybersecurity, or security-focused IT infrastructure.
- Hands-on experience with privileged accounts, vaulting, session management, and access workflows.
- Strong understanding of identity, authentication, and privileged access concepts.
- Experience with PAM platforms, enterprise integrations, and hybrid environments.
- Experience troubleshooting complex system, authentication, and network-related issues.
- Scripting experience with PowerShell or similar technologies for automation.
- Familiarity with Azure Active Directory and hybrid identity environments.
- Experience providing global 2nd and 3rd level support for PAM services.
- Good understanding of network architecture and secure access design.
- Degree in Computer Science, Information Systems, or related field, or equivalent hands-on experience.
- Strong analytical, problem-solving, and communication skills.
- Fluent English is a must.

NICE TO HAVE Service Requirements

• Experience with PAM architecture and global deployments.

- Experience integrating PAM with cloud platforms and enterprise applications.
- Experience driving automation and standardization initiatives.
- DevSecOps mindset and experience in global cybersecurity teams.

SCHEDULE ?:

- 08h-17h from Monday to Friday (flexible)
- 4 days by remote | 1 day on-site.

CONDITIONS ?:

- Salary package based on your profile.
- Ticket restaurant included in-office hours.
- Flexible compensation plan (free of income tax) where we provide you with medical insurance, public transport ticket and childcare check.
- Discounts in gym network.
- Training catalogue.

Our goal is that you are well in every way!

📌 Principal Privileged Access Management Engineer - Pharma (hybrid) (Barcelona)
🏢 Ambit Iberia
📍 Barcelona