PAM Security Engineer

About the role

We are looking for a PAM Security Engineer to join Luminor’s Security Engineering Unit. You will work hands‑on with modern infrastructure, cloud and automation technologies to protect critical banking systems across the Baltics.

Key responsibilities

• Design, implement and maintain Privileged Access Management (PAM) infrastructure and related security controls.
• Develop and automate PAM deployments using DevOps, CI/CD pipelines, Infrastructure as Code and scripting.
• Drive onboarding of applications, systems and assets into PAM solutions, ensuring proper security coverage.
• Implement technical controls that support privileged access governance and risk management.
• Create monitoring, reporting, alerting and operational controls for effective PAM operations.
• Build and improve automated onboarding and off‑boarding processes for privileged accounts.
• Identify opportunities to enhance PAM capabilities through automation, new features, tooling and process improvements.
• Contribute to PAM governance, standards and best practices across the organization.
• Participate in cybersecurity incident response and security investigations.
• Collaborate with infrastructure, cloud, engineering and security teams to strengthen access controls.

Required profile

• Experience with infrastructure platforms, cloud environments and DevOps practices.
• Hands‑on experience with automation, CI/CD pipelines, Infrastructure as Code and modern deployment practices.
• Proficiency with Linux/UNIX and Microsoft Windows environments.
• Strong troubleshooting and problem‑solving abilities.
• Experience with AWS or other cloud platforms.
• Solid understanding of cybersecurity concepts and security controls.
• Fluent English, both spoken and written.
• Experience with PAM solutions, IAM technologies or privileged access controls is a strong advantage.

Required skills

• Linux/UNIX
• Microsoft Windows
• AWS (or other cloud platforms)
• CI/CD pipelines
• Infrastructure as Code (e.g., Terraform, Ansible)
• Scripting (e.g., Bash, PowerShell)
• Privileged Access Management (PAM) solutions
• Identity and Access Management (IAM) technologies