PAM Senior Specialist

About the Role

Misk Foundation is seeking a PAM Senior Specialist to join its team in Riyadh, Saudi Arabia. This full-time role focuses on the operation and continuous improvement of the Foundation's Identity and Access Management (IAM) and Privileged Access Management (PAM) platforms. The specialist will ensure that identities, entitlements, and privileged credentials are managed in accordance with least privilege principles, need-to-know requirements, and NCA ECC-2 / PDPL obligations. The position requires 0-1 years of experience and serves as a technical authority on IAM and PAM controls.

Key Responsibilities

• Operate the PAM platform, including vaulting, session recording, Just-in-Time (JIT) elevation, and password rotation.
• Onboard privileged accounts to PAM within established Service Level Agreements (SLAs) and remediate out-of-PAM privileged accounts.
• Maintain break-glass accounts, ensuring sealed offline vault, split knowledge, quarterly rotation, and Sev 1 alerting on use.
• Review privileged access requests against least-privilege criteria.
• Execute quarterly access reviews for standard, service, shared, M365 guest, and federated access, and monthly reviews for privileged access.
• Drive remediation of dormant, excessive, or orphaned access in collaboration with line managers.
• Produce audit evidence for NCA, PDPL, and internal audit requirements.
• Support identity-compromise incidents, including containment, session revocation, credential reset, and evidence preservation under MF-DT-PRC-004.
• Provide Cybersecurity Review input for IAM/PAM-impacting changes under MF-DT-PRC-006.
• Maintain IAM/PAM runbooks, Standard Operating Procedures (SOPs), and architecture documentation.
• Propose hardening measures against credential theft, MFA fatigue, and session hijacking.

Internal and External Interactions

The PAM Senior Specialist will engage with various internal and external stakeholders to ensure effective IAM/PAM operations and compliance.

• Internal Interactions: Head of Cyber Defense & Operations (line manager), Digital Platform & Infrastructure, DT Support, HR, system owners, Internal Audit, Risk & Compliance, and Legal departments.
• External Interactions: PAM and IAM/IGA vendors and partners, Microsoft and identity provider support, and external auditors (NCA, PDPL, ISO 27001).

Qualifications and Experience

• 0-1 years of experience in a relevant field.
• Demonstrated technical understanding of IAM and PAM controls.
• Familiarity with least privilege principles, need-to-know, and regulatory obligations such as NCA ECC-2 / PDPL.

Work Environment

This is a full-time position based in Riyadh, Saudi Arabia, within the Misk Foundation. The role involves working closely with the Cyber Defense & Operations team and collaborating across various departments to maintain robust cybersecurity posture.