Description
The Cyber Security Engineering Privileged Access Management team at London Stock Exchange Group (LSEG) is seeking an experienced Senior Security Engineer to deploy, configure, and maintain PAM platforms. You will focus on implementing new PAM capabilities, onboarding, operations, automation, and integrations under established architecture and standards.
Key Responsibilities:
- Implement PAM capabilities across on-prem and cloud workloads
- Support core PAM features: account discovery/onboarding, credential rotation, policy configuration, and session management
- Complete platform maintenance, health checks, and performance monitoring; triage incidents and service requests
- Integrate PAM with AD/EntraID, IDPs, ticketing/ITSM, CSPM, SIEM/SOAR, DevOps tooling, and secrets management
- Develop automation scripts and REST API integrations to scale onboarding and reduce manual effort
- Produce and maintain documentation: runbooks, SOPs, configuration baselines, and knowledge articles
- Collaborate with infrastructure, cloud, and security teams to ensure consistent controls and smooth deployments
Technical Requirements:
- Hands-on experience with leading PAM platforms (e.g., CyberArk, Delinea, BeyondTrust, One Identity)
- Proficient in MS Azure and AWS/GCP cloud platforms
- Understanding of Windows/Linux administration, AD/EntraID, networking, and database basics
- Scripting proficiency (PowerShell/Python) and familiarity with APIs
- Practical experience in enterprise support: solving, change management, and documenting fixes/runbooks
Additional Desired Capabilities:
- Exposure to endpoint privilege management, JIT access, secrets management for CI/CD, and container/Kubernetes integrations
- Basic familiarity with SIEM tooling and alerting; security certifications or vendor badges are advantageous