Privileged Access Management (PAM) Systems Engineer

Job description

The Client Access Technologies team provide technical solutions to support Identity and Access Management functions within HSBC. Areas in which we work include; Authentication and authorization, Identity and Access provisioning and governance, Identity lifecycle management, and Privileged access management.

Teams within Client Access Technologies use a ‘follow the sun' support model, operating as a single global team. Team members are located in Hong Kong, Guangzhou, UK, US, and India. Collaboration and coordination with Global Teams is essential for providing support for Global Users.

The advertised roles are within the Privileged Access Platform Engineering team. This is a team currently of nine skilled technicians supporting two key products; Quest TPAM and Cyberark Privileged Access Security. The team are the service owners, and are responsible for the management of the infrastructure. Day to day management of users, accounts and access is outside the scope of our team.

This role will include support tasks as well as design, build and project work.
The candidate will work as part of a global team responsible for delivering and supporting Privileged Access Management tools for HSBC.

Leadership and Strategic Thinking
· Build strong relationships with our key customers
· Self-motivated and ability to use initiative within a team
· Contribute to PAM strategy and direction for HSBC
· Action process improvements to benefit the team and customer
· Consider industry trends in the PAM and Security space
Technical
· Own support tickets and cases to completion, locating root cause
· Perform proactive health checks and environment analysis
· Manage change activity for our global environment
· Manage projects, and complex tasks within the PAM tool space
· Own customer engagement requests, defining the best solutions
· Contributing to audit and compliance work
· Produce clear and concise documentation, guides and reports
Business
· Understand our customer's current and future requirements
· Interpret customer requirements to technical solutions
· Represent our team to customers and other connected parties
· Work with internal and external audit teams – answering queries
Core Behaviours
· Maintain a customer service focus at all times
· Seek opportunities to innovate and make improvements
· Challenge status quo and inefficient processes
· Escalate risks identified and take ownership of issues
· Enthusiasm to learn new skills and also share knowledge
· Flexible and pragmatic approach to working in a large organisation
· Accepting and open to working in a culturally diverse organisation

Desired profile

Qualifications :

·  Knowledge of Cyberark Privileged Access Security (PAS)
·  Knowledge of Quest TPAM
·  Knowledge of Privileged Access Management concepts
·  Strong technical knowledge of Cyberark PAS and/or Quest TPAM – including design and architecture, in-depth understanding of key components and features, and common support scenarios
·  Good knowledge of Windows Server and/or UNIX Operating System
·  Ability to troubleshoot and diagnose problems
·  Ability to work on multiple tasks and prioritize correctly
·  Strong communication skills – written, verbal and video
·  Ability to manage projects or complex tasks
·  Self-motivated and able to deliver within a global remote team
Essential Experience:
·  Minimum of 2 years of experience working in an infrastructure role within Privileged Access Management – working directly with either Cyberark PAS or Quest TPAM.
·  Minimum 5 years of experience working in an IT infrastructure support or build team.
·  Experience managing projects or complex tasks
·  Experience handling complex and high impact problems
·  Experience of working under pressure with multiple deliverables
Ideal Experience:
·  Experience of working in a large and global organization
·  Change Management & Incident Management Experience
·  Customization of Cyberark CPM and PSM plugins and connectors
·  Experience of configuring and supporting PSM sessions
Preferred Skills:
·  Knowledge of Identity and Access Management concepts
·  Understanding of AD, UNIX, Oracle and database technology
·  Ability to write scripts and basic code within the PAM space
·  Knowledge of Putty, PowerShell, REST API and PACLI
·  Ability to interpret and summarize complex reports and data sets
·  Formal security or PAM tooling qualifications (Certified Cyberark Engineer for example).
EEO/AA/Minorities/Women/Disability/Veterans