PAM admin

About the Role

HCLTech is seeking an experienced PAM Admin to join their team in Riyadh, Saudi Arabia. This full-time role requires a professional with 5-10 years of experience in IT security, specifically focusing on privileged access management solutions and infrastructure support. The ideal candidate will provide L3 support and contribute to the design and implementation of enterprise-wide PAM solutions.

Key Responsibilities

• Design, implement, and maintain enterprise-wide Beyond PAM solutions to ensure secure management of privileged credentials and access.
• Provide L3 technical support for complex PAM-related incidents and problems within the infrastructure environment.
• Develop and enforce PAM policies, procedures, and standards aligned with industry best practices and compliance requirements.
• Manage the full lifecycle of privileged accounts, including provisioning, certification, and deprovisioning.
• Implement and optimize PAM tools for session recording, credential vaulting, and automated password rotation.
• Operate Thales MFA and manage tokens, including MFA integration with ADFS.
• Utilize Beyond Trust password vault for saving complex passwords.
• Conduct regular security assessments and audits of privileged access controls.
• Perform root cause analysis for security incidents related to privileged access.
• Create and maintain documentation for PAM architecture, configurations, and operational procedures.
• Collaborate with cross-functional teams to integrate PAM solutions with existing infrastructure and security tools.
• Provide mentorship to junior team members on PAM best practices and troubleshooting techniques.
• Contribute to security management within the domain and drive compliance activities.

Qualifications and Experience

• 8-10 years of experience in IT security with a focus on privileged access management.
• Proven experience with implementing and supporting enterprise Beyond Trust PAM solutions. Experience with other PAM solutions is an added advantage.
• Strong knowledge of infrastructure components including servers, databases, network devices, and cloud environments.
• Advanced troubleshooting and problem-solving skills for complex L3 support issues.
• Experience with identity management concepts and technologies.
• Thorough understanding of security frameworks such as NIST, ISO 27001, and CIS.
• Experience with SIEM tools and security monitoring solutions.
• Knowledge of compliance requirements related to privileged access (*, SOX, PCI DSS, HIPAA).

Required Skills

• Excellent communication skills with the ability to translate technical concepts to non-technical stakeholders.
• Strong scripting skills (PowerShell, Python, Bash, or similar) are considered beneficial.