PAM Engineer

Lisboa · Hybrid

About this role

We're fast learners, hard workers, natural collaborators... and we Make Modern Happen!

Our ambition is to unlock the potential of our digital world so that organisations everywhere can innovate and thrive securely. We aim to achieve this goal by bringing together the world’s most talented people and the most powerful technologies, combining them to address our customers' challenges and to build something stronger together.

If you share our vision, join us!

Right now, we are looking for a PAM Engineer to integrate our internal team.

Your responsibilities include:

• Deliver secure, compliant, and operationally excellent Privileged Access Management across the client’s global estate.
• Manage CyberArk and SailPoint platforms to control, monitor, and audit privileged access, enforcing least-privilege and supporting compliance with financial services regulations.

You must have:

• Minimum 3 years’ hands-on experience with Privileged Access Management platforms, with demonstrable CyberArk expertise.
• Deep hands-on experience with CyberArk components: Digital Vault, CPM, PSM, PVWA, and Conjur.
• Experience with privileged credential lifecycle management: onboarding, rotation, suspension, and decommissioning.
• Familiarity with identity governance platforms (SailPoint) for privileged account certification.
• Understanding of Active Directory, Entra ID, and authentication protocols in the context of privileged access.
• Experience with ServiceNow (incident, change, request, and CMDB modules).
• Scripting skills for PAM automation (PowerShell, Python, REST APIs).
• Knowledge of least-privilege principles, just-in-time access, and privileged session monitoring.
• CyberArk Certified Delivery Engineer (CDE) or CyberArk Defender certification (or equivalent).
• Effective communicator with strong written and verbal English skills (B2 or higher).

We value:

• Microsoft Certified: Identity and Access Administrator Associate.
• Previous experience within a managed service provider or financial services environment.
• Experience with BeyondTrust or other PAM platforms beyond CyberArk.
• Knowledge of DORA, FCA, or PRA regulatory frameworks.
• Experience with secrets management for DevOps pipelines (Conjur, HashiCorp Vault).
• Understanding of zero trust architecture principles as they apply to privileged access.
• Experience with PAM in hybrid and multi-cloud environments (Azure, AWS).

We offer:

• Regular professional development;
• Health insurance, with family package;
• Office facilities for meals and snacks;
• Regular teambuilding programs;
• Friendly workplace.

Workplace: Lisbon - Hybrid

Claranet, Make modern happen!



Company at a glance

Claranet Portugal is the Portuguese market leader in Information Technologies and a specialist in Cloud, Workplace, Applications, Data & AI and Security solutions and managed services.

Founded in 1996, Claranet Portugal has evolved from an innovative and pioneering Internet Service Provider to an independent Managed Services Provider, with around 1,000 employees operating from two offices (Lisbon and Porto) and two datacentres.

More than 2,200 business customers trust Claranet Portugal to modernise, design, implement and operate their applications, critical infrastructures and data securely, 24x7. It works closely with the world's most influential technology companies, creating innovative services with the best solutions and tools provided by its Strategic Partners.

More information at claranet.com/pt

Founded1996
Team Size1,001-5,000 employees
WorkspaceHybrid
IndustryInformation Technology & Services
Location
Lisbon, Portugal

Top Benefits

  • Professional development
  • Health insurance
  • Family package
  • Office meals and snacks
  • Teambuilding programs

Tired of cold applications?

Sign up with Clera and we'll reach out the moment a role actually fits you — no more spraying applications into the void.

Know someone who'd be great for this?