About this role
Profile Summary
We are seeking an experienced PAM (Privileged Access Management) Engineer to join our Cyber Security team. The role will focus on the development, operating and continuously improving PAM capabilities across a Mizuho entities.
The successful candidate will provide hands-on technical ownership of privileged access controls, account onboarding, credential management, session monitoring, automation and platform resilience, while working closely with infrastructure, identity, application, database, audit and security teams.
Duties and Responsibilities
- Develop, administer and support the Privileged Access Management platform.
- Manage the full PAM platform lifecycle, including design, implementation, upgrades, patching, configuration, capacity, resilience, disaster recovery, health monitoring and operational support.
- Onboard privileged, service, database, application, local administrator, break-glass and third-party accounts using consistent standards, ownership controls and approved Safe structures.
- Configure and maintain PAM platforms, policies, standard and custom connection components, reconciliation accounts, credential rotation, verification, session controls and access workflows.
- Design and implement automation using APIs, PowerShell or Python to support discovery, bulk onboarding, metadata remediation, reporting and operational processes.
- Produce and maintain high-level and low-level designs, implementation procedures, runbooks, support documentation, control evidence and technical standards.
- Integrate PAM with Active Directory, identity-management workflows, SIEM, ITSM, cloud services, databases and applications, including the development and support of custom web connectors and third-party application connectors.
- Investigate platform incidents, failed rotations, authentication issues, connection failures and account lockouts, completing root-cause analysis and sustainable remediation.
- Provide KPI, KRI, control-effectiveness, platform-health and compliance reporting, and support audit remediation, risk management and continuous improvement.
Qualifications, Skills and Experience
Experience:
- Proven hands-on experience engineering and supporting PAM in a large enterprise environment.
- Strong experience with privileged account onboarding, Safe design, access models, rotation policies, privileged session connectivity and credential-management processes.
- Experience troubleshooting PAM components, failed password changes, reconciliations, account verification, session connectivity and integration issues.
- Experience delivering platform upgrades, resilience improvements, disaster-recovery testing and production changes through formal change controls.
- Experience working with infrastructure, Windows, Linux, database, application, identity, security operations, risk and audit stakeholders.
- Proficiency in automation, API integration and scripting, preferably PowerShell and Python.
Technical Skills:
- Advanced knowledge of PAM solutions.
- Working knowledge of Credential Providers, REST APIs and application credential-management patterns.
- PAM design, platform configuration, account discovery, onboarding, reconciliation, rotation, verification, session monitoring, and development of custom web and third-party application connectors.
- Windows Server, Active Directory, Group Policy, Kerberos, LDAP, RDP, SSH, certificates, networking, firewalls and load-balancing fundamentals.
- Integration with Microsoft Sentinel or another SIEM for privileged-access monitoring, alerting and audit evidence.
- Knowledge of Azure and hybrid-cloud privileged-access patterns; AWS or GCP experience is desirable.
- Scripting and automation using PowerShell, Python, REST APIs, JSON and source-control practices.
- Understanding of ITIL processes, change management, incident management, problem management and technical documentation.
Security Domain Expertise:
- Privileged Access Management governance, control design and operating models.
- Privileged and service-account lifecycle management, ownership, attestation and exception handling.
- Least privilege, segregation of duties, credential rotation, session isolation and monitoring.
- PAM solution security architecture, platform resilience, disaster recovery, audit support and regulatory control evidence.
Qualifications:
- Degree in IT, Cyber Security, Computer Science or a related discipline, or equivalent practical experience.
- Relevant certifications such as:
- PAM relevant certification
- Microsoft security or Azure certification
- CISSP, CISM or equivalent security certification
What Mizuho Can Offer You
Here at Mizuho, there are fantastic progression opportunities and clear paths to promotion. We will give you ample opportunity to affect change and to help grow our business.
In addition to the great opportunity outlined above we are also currently able to offer:
- Competitive starting salary, plus discretionary bonus
- Non-contributory pension
- 27 days’ annual leave
- Core working hours*
- Hybrid working - office and home based*
- Virtual GP
- Wellbeing benefits, including Mental Health Allies and First Aiders
*For applicable roles only
At Mizuho, we embrace flexible ways of working when the role permits. We offer different working arrangements like part-time, job-sharing and hybrid (office and home) working. Our purpose-led culture and global infrastructure help us connect, collaborate, and work together in agile ways to meet all our business needs.
We are committed to supporting equality and diversity, and seek to create a workplace that is fully inclusive. We welcome applications from all sections of the community that we operate in and from all ethnic backgrounds, sexual orientation, beliefs, gender identities and disabilities
If you require more information about our equal opportunities policy or wish to discuss any accessibility requirements or reasonable adjustments please contact the recruitment team – [email protected] and we will be happy to help.