Lead PAM Engineer (Cyberark / IAM)

About MUFG Investor Services

MUFG Investor Services is a trusted partner to many of the world’s largest public and private funds, providing asset servicing and operational solutions built for alternatives. With over $1 trillion in client assets under administration, we offer fund administration, banking, payments, fund financing, foreign exchange overlay, corporate and regulatory services, custody, business consulting, and more. Operating from 17 locations worldwide, we help clients mitigate risk, enhance efficiency, and navigate the operational complexities of today’s investment management landscape. As a division of Mitsubishi UFJ Financial Group (MUFG), one of the world’s largest financial institutions with approximately $3 trillion in assets, we combine deep expertise with the strength and stability of a leading financial institution. To learn more, visit us at www.mufg-investorservices.com.

#LI-Hybrid

MUFG Investor Services is seeking an experienced PAM Administrator to join our Identity & Access Management (IAM) team, reporting to the Head of IAM & PAM. This is an exciting opportunity to play a key role in advancing the organization's Privileged Access Management (PAM) and broader Identity & Access Management (IAM) capabilities as we continue to strengthen our security posture and support strategic IAM initiatives across the enterprise.

In this role, you will leverage your PAM expertise to drive the evolution of our PAM strategy and operations while also supporting key IAM and Identity Governance & Administration (IGA) initiatives. Working closely with Information Security, Infrastructure, Cloud, Operations, and IAM stakeholders, you will help deliver secure, resilient, and scalable identity and access management solutions across the organization.

Key Responsibilities

• Design, implement, and support PAM solutions for privileged and non-privileged access across diverse user populations and target systems.
• Develop, maintain, and optimize PAM operational processes, procedures, and policies.
• Partner with Information Security teams to identify, assess, and mitigate PAM-related risks.
• Collaborate with Cloud and Infrastructure teams to onboard and migrate local or unmanaged privileged access into approved PAM solutions.
• Work closely with PAM vendors to enhance platform capabilities and drive continuous improvement.
• Provide global operational support for PAM platforms, including participation in on-call rotations.
• Support IAM and IGA implementations and ongoing operational activities.
• Lead IAM/PAM audit, compliance, and regulatory review activities.
• Partner with Security Operations teams to implement and manage Endpoint Privilege Management (EPM) solutions across endpoints and servers.

#LI-Hybrid

Required

• 7+ years of experience in PAM operations and engineering.
• Strong expertise in PAM concepts, technologies, operational processes, and governance.
• Proven experience managing and operating enterprise PAM platforms independently.
• Hands-on experience with IAM and Identity Governance & Administration (IGA) solutions.
• Strong understanding of audit, compliance, and security controls related to IAM and PAM.
• Experience with leading PAM platforms such as CyberArk, Delinea, or Beyond Trust.
• Working knowledge of broader IAM domains, including authentication, federation, and identity lifecycle management.
• Experience implementing and supporting Endpoint Privilege Management (EPM) solutions.
• Strong understanding of Active Directory (AD), LDAP, Azure AD, AWS, and cloud identity services.
• Experience managing privileged access across infrastructure, operating systems, databases, and cloud environments.
• Hands-on experience with Azure and/or AWS IAM and PAM capabilities.
• Excellent communication, stakeholder management, and collaboration skills.
• Experience supporting globally distributed, business-critical environments.

Must-Have Skills

• Deep technical expertise with at least one enterprise PAM platform.
• Hands-on experience with Azure or AWS IAM/PAM capabilities.
• Strong working knowledge of Active Directory and LDAP-based identity management.
• Implementation and operational experience with at least one EPM solution.

Preferred

• PAM certifications such as CyberArk Defender or CyberArk Sentry.
• Cloud security certifications such as Microsoft Azure Security Engineer (AZ-500) or AWS Certified Security Specialty.

What’s in it for you to join MUFG Investor Services? 

Take a look at our careers site and you’ll find everything you’d expect working with one of the fastest-growing businesses at one of the world’s largest financial groups. Now take another look. Because it’s how we defy expectations that really defines us. You’ll feel that difference in all kinds of ways.  Our vibrant CULTURE. Connected team. Love of innovation, laser client focus as well as hybrid working.

So, why settle for the ordinary?  Apply now for your next Brilliantly Different opportunity. 

We are committed to using Artificial Intelligence (AI) tools responsibly and being transparent about what we do to build trust and confidence. At MUFG Investor Services, we use AI tools to support our recruitment process by helping us understand how well candidates’ applications align with the requirements of the role.

All AI recommendations are reviewed by our recruitment team before any decisions are made.

More information on our use of AI tools is available in our Privacy Notice available to you as part of your application.

We thank all candidates for applying; however, only those proceeding to the interview stage will be contacted.

MUFG is an equal opportunity employer.