Privileged Access Management (PAM) Engineer

About the role

We are looking for an experienced Privileged Access Management (PAM) Engineer to join our Riyadh team. The role focuses on operating and securing the BeyondTrust PAM suite, ensuring that privileged credentials and sessions are managed in line with industry best practices and regulatory requirements.

Key responsibilities

• Administer, configure and maintain BeyondTrust Password Safe, Privileged Remote Access (PRA) and Endpoint Privilege Manager (EPM).
• Onboard assets, vault credentials and enforce privileged session controls across Windows, Linux and database platforms.
• Maintain high availability, apply patches and manage change processes to keep the PAM platform operational.
• Design secure password vault structures that align with corporate security policies.
• Support access‑review cycles, generate compliance reports and ensure adherence to ISO 27001, NIST, SAMA CSF and NCA ECC standards.
• Troubleshoot PAM‑related incidents in collaboration with IT and security teams.
• Produce documentation and provide on‑call support as required.

Required profile

• 3–5 years of experience in IT infrastructure, IAM or cybersecurity with a focus on PAM.
• Bachelor’s degree in Computer Science or a related discipline.
• BeyondTrust Certified Engineer or an equivalent PAM certification (mandatory).
• Previous experience in the banking or financial sector is a plus.

Required skills

• BeyondTrust PAM suite – Password Safe, PRA, EPM.
• Windows, Linux and database operating environments.
• Active Directory and identity integration concepts.
• Network protocols and credential management.
• Patch management and change‑control processes.