We are looking for a Principal Privileged Access Management Engineer to design, operate, and continuously improve Privileged Access Management (PAM) services across global hybrid environments. In this role, you will act as a technical subject matter expert within a global cybersecurity team, ensuring the reliability, security, and scalability of PAM services for both human and non-human identities. You will work hands‑on with privileged access, vaulting, session management, authentication, access governance, and automation, while providing advanced support and translating security requirements into scalable, secure‑by‑design solutions. TASKS & RESPONSIBILITIES

Design, implement, operate, and continuously improve PAM solutions and integrations across global environments. Manage privileged accounts, secure vaulting, session control, authentication flows, and privileged access workflows. Act as a subject matter expert on PAM technologies, architecture, integrations, and privileged access security. Provide 2nd and 3rd level support for global PAM services and troubleshoot complex system, authentication, and integration issues. Support critical incidents and contribute to continuous service improvement and operational efficiency. Drive improvements in privileged access governance, automation, monitoring, and standardization. Translate business and cybersecurity requirements into secure, scalable PAM solutions and enhancements. Contribute to or lead initiatives and projects related to access control and identity security. Collaborate with IT teams and stakeholders to improve the security, efficiency, and usability of privileged access processes. Develop and maintain automation and operational solutions using scripting. Support secure architecture and design decisions aligned with cybersecurity and infrastructure standards.



Maintain clear and up‑to‑date technical documentation, procedures, and operational knowledge. Support knowledge transfer, training, and operational readiness across global teams. SKILLS

5+ years of experience in PAM, IAM, Cybersecurity, or security-focused IT infrastructure. Hands‑on experience with privileged accounts, vaulting, session management, and access workflows. Strong understanding of identity, authentication, and privileged access concepts. Experience with PAM platforms, enterprise integrations, and hybrid environments. Experience troubleshooting complex system, authentication, and network‑related issues. Scripting experience with PowerShell or similar technologies for automation. Familiarity with Azure Active Directory and hybrid identity environments. Experience providing integral 2nd and 3rd level support for PAM services. Good understanding of network architecture and secure access design. Degree in Computer Science, Information Systems, or related field, or equivalent hands‑on experience. Strong analytical, problem‑solving, and communication skills. Fluent English is a must. NICE TO HAVE Service Requirements

Experience with PAM architecture and global deployments. Experience integrating PAM with cloud platforms and enterprise applications. Experience driving automation and standardization initiatives. DevSecOps mindset and experience in global cybersecurity teams. SCHEDULE

08h-17h from Monday to Friday (flexible) 4 days by remote | 1 day on‑site. CONDITIONS

Salary package based on your profile. Ticket restaurant included in-office hours. Flexible compensation plan (free of income tax) where we provide you with medical insurance, public transport ticket and childcare check. Discounts in gym network. Training catalogue. Our goal is that you are well in every way!

#J-18808-Ljbffr

📌 Principal Privileged Access Management Engineer - Pharma (hybrid) (Madrid)
🏢 Ambit Iberia
📍 Madrid