(Senior) PAM Engineer

In this role you will lead and implement privileged access management within Berenberg’s Cyber Security Operations. You will design and govern PAM policies, supervise privileged accounts, and enhance monitoring of credential usage to strengthen resilience. You will collaborate with cross-functional teams and mentor peers to drive continuous improvement. This position offers the chance to shape PAM strategy in a regulated financial services environment and contribute to a proactive security culture.

• private pension plan (10% of base)
• 30-day holiday allowance
• private health insurance
• life insurance
• flexible working hours
• enhanced parental leave policies

• Lead PAM strategy, governance, and compliance aligned with regulatory requirements
• Deploy, integrate, and maintain PAM platforms (CyberArk, BeyondTrust, Delinea) with AD/LDAP/Azure AD
• Enforce granular access controls (RBAC, JIT, least privilege) and manage privileged account lifecycle
• Monitor privileged sessions, detect unauthorized access, and support credential-related investigations
• Educate technical teams and stakeholders on privileged access security best practices

• 3–5+ years in PAM/Identity Security
• Hands-on experience with PAM platforms (CyberArk, BeyondTrust, Delinea/Thycotic/Centrify)
• Proven ability to design and mature a PAM program and governance framework
• Strong integration knowledge across Active Directory, LDAP, and Microsoft Entra ID / Azure AD
• Operational security experience with cross-functional Cyber Security Operations
• Strong communication and stakeholder management; financial services experience desirable

• strong communication
• stakeholder management
• mentoring peers
• PAM platforms: CyberArk, BeyondTrust, Delinea/Thycotic/Centrify
• Active Directory, LDAP, Microsoft Entra ID / Azure AD
• RBAC, Just-In-Time (JIT) access