AVEVA is creating software trusted by over 90% of leading industrial companies.
Job Title: IDAM PAM Engineer
Location: United Kingdom (Cambridge / London)
Employment Type: Full-time, permanent
The job
Key responsibilities
1. Lead the automation‑first design and engineering of PAM solutions
2. Play a senior role in CyberArk (or similar) implementation and expansion
3. Engineer fully automated onboarding for:Privileged user accountsService and application accountsCredentials, secrets, and keys
4. Integrate PAM with SailPoint for automated governance, lifecycle, and access reviews
5. Define PAM standards, onboarding patterns, and automation frameworks
6. Automate privileged access requests, approvals, and provisioning via ServiceNow
7. Build automated PAM and SailPoint reporting for audits and compliance
8. Reduce manual PAM operations through scripting and orchestration
9. Secure privileged access across:Active Directory environmentsWindows and Linux platformsAzure and cloud servicesApplications and DevOps pipelines
10. Act as senior escalation point for PAM‑related incidents
11. Partner with Security Architecture and Audit on control design and evidence automation
12. Produce high‑quality architecture diagrams, runbooks, and engineering documentation
13. Apply AI‑assisted tooling to enhance troubleshooting and operational insight
Essential requirements
14. Significant, hands‑on experience in Privileged Access Management
15. Hands‑on SailPoint experience is mandatory
16. Strong experience with CyberArk (PAS, PSM, EPM) or equivalent tools
17. Proven ability to engineer and automate PAM at scale
18. Strong understanding of privileged access risks and threat vectors
19. Advanced experience with Active Directory and hybrid identity environments
20. Strong automation and scripting skills (PowerShell, Python, APIs)
21. Experience supporting audits using automated evidence and reporting
22. Ability to operate as a senior engineer, providing technical leadership
Desired skills
23. Experience using ServiceNow and/or Jira to automate privileged access workflows
24. Broader knowledge of IAM, IGA, Zero Trust, or identity security domains
25. Experience working with DevOps teams, including securing pipelines and secrets
26. Bachelor’s degree in Computer Science, Engineering, Mathematics, or related discipline; or equivalent experience
27. Relevant certifications (e.g. CyberArk, SailPoint, Microsoft Security, Cloud Security)
28. Strong communication and stakeholder management skills
29. Customer‑focused mindset, balancing security with business usability
30. Demonstrated growth mindset, passionate about continuous learning
31. Experience mentoring or guiding other engineers
IT at AVEVA
Our global team of 300+ IT professionals is responsible for the systems and platforms that keep AVEVA running. By empowering our colleagues and ensuring the smooth operation of the company, we help keep the business healthy and productivity high. We also provide key support for the transformation and modernisation efforts globally.
We pride ourselves on a collaborative, inclusive and authentic culture that provides a framework allowing for autonomy, whilst always being available for support and guidance. We respect the differences that each team member brings and seek to include those perspectives in our solutions for our business functions. The energy and sense of purpose is evident when talking to team members, you will feel part of something special from the first day you join.
Find out more:
UK Benefits include:
Flexible benefits fund, emergency leave days, adoption leave, 28 days annual leave (plus bank holidays), pension, life cover, private medical insurance, parental leave, education assistance program.
It’s possible we’re hiring for this position in multiple countries, in which case the above benefits apply to the primary location. Specific benefits vary by country, but our packages are similarly comprehensive.
Find out more: aveva.com/en/about/careers/benefits/
Hybrid working
By default, employees are expected to be in their local AVEVA office three days a week, but some positions are fully office-based. Roles supporting particular customers or markets are sometimes remote.
Hiring process
Interested? Great! Get started by submitting your cover letter and CV through our application portal. AVEVA is committed to recruiting and retaining people with disabilities. Please let us know in advance if you need reasonable support during your application process.
Find out more: aveva.com/en/about/careers/hiring-process
About AVEVA
AVEVA is a global leader in industrial software with more than 6,500 employees in over 40 countries. Our cutting-edge solutions are used by thousands of enterprises to deliver the essentials of life – such as energy, infrastructure, chemicals, and minerals – safely, efficiently, and more sustainably.
We are committed to embedding sustainability and inclusion into our operations, our culture, and our core business strategy. Learn more about how we are progressing against our ambitious 2030 targets: sustainability-report.aveva.com/
Find out more: aveva.com/en/about/careers/