Privileged Access Management Engineer (Temp)

About Us:

National Bank of Kuwait (Int'l) Plc. is a leading bank in Kuwait with a strong presence in the international market. We offer a wide range of banking and financial services to our customers, and we are committed to providing innovative and efficient solutions to meet their needs. Our team is made up of highly skilled and motivated professionals who work together to deliver exceptional results and drive the growth of the bank.

Job purpose

The Privileged Access Management (PAM) Engineer is a hands-on role responsible for the implementation and rollout of the Wallix PAM solution within NBKI. The role focuses on delivering a fully operational PAM capability, including onboarding privileged accounts, integrating target systems, and implementing access control, credential management, and session monitoring across NBKI’s infrastructure, application, and network environments. 

Working closely with Technology teams, the Information Security Office, and external vendors, the role will support the remediation of privileged access risks and audit findings. The engineer is expected to complete the PAM deployment within the engagement period, including documentation, operational procedures, and knowledge transfer to internal teams.

Key responsibilities and accountabilities

• Lead the implementation and rollout of the Wallix PAM solution across NBKI environments.
• Configure Wallix PAM components including privileged account vaulting, session management, access control policies and audit capabilities.
• Onboard privileged accounts including domain administrator accounts, service accounts, network administrator accounts, application administrator accounts and database privileged accounts.
• Integrate PAM with core infrastructure including Active Directory / Entra ID, Windows servers, Linux servers, network devices and security appliances.
• Define and implement privileged access workflows including access request, approval, break-glass, credential rotation and session recording processes.
• Collaborate with the Technology teams and the Information Security Office to identify privileged access use cases and agree onboarding priorities.
• Support remediation of audit and assurance findings related to privileged access, shared administrator accounts and privileged session monitoring.
  Coordinate with Wallix and NBKI technology partners to implement, test and troubleshoot the PAM solution.
• Prepare operational documentation including PAM configuration, onboarding procedures, support runbooks and handover materials.
• Provide knowledge transfer to Technology and UAM teams to support ongoing operation of the Wallix PAM solution.

Any other tasks related to privileged access management, identity security or IT security at the discretion of the Head of IT Security.

Qualifications & Experience

• Proven hands-on experience implementing PAM solutions (Wallix experience preferred).
• Hands-on experience onboarding privileged domain accounts, service accounts, local administrator accounts and network / appliance administrator accounts.
• Strong understanding of identity and access management principles, least privilege, privileged session control and credential lifecycle management.
• Hands-on experience with Active Directory, Entra ID, Windows Server and Linux server environments.
• Experience integrating PAM with network devices, firewalls, security appliances, application platforms and infrastructure systems.
• Experience working with third-party vendors to deliver security technology deployments or perform impact assessments.
• Experience producing technical documentation, operational runbooks and knowledge transfer materials.
• Proficiency in scripting languages such as PowerShell or Bash (preferred).
• Degree in Computer Science, Information Security or a related discipline (preferred).
• Experience in IT within financial services or regulated environments (preferred).

Essential Competencies / Skills 

• Analytical thinking
• Planning and Organising
• Effective communication and documentation skills
• Problem solving
• Delivery-focused approach
• Ability to work independently within a short-term contractor engagement

Technical Skills

• Wallix PAM
• Privileged Access Management platforms (Beyond Trust, Cyber Ark, etc.) 
• Active Directory and Entra ID
• Microsoft Windows Server
• Linux Servers (Red Hat, Oracle, Ubuntu)
• Networking devices (Cisco and Meraki preferred)
• Microsoft Azure
• VMware
• Microsoft SQL Server
• Scripting using PowerShell or Bash (preferred)

Key success factors

• Wallix PAM solution is deployed and configured within the agreed engagement scope.
• Critical privileged accounts and systems are onboarded into PAM.
• Privileged account vaulting, access workflow, credential rotation and session monitoring capabilities are operational.
• Audits associated with PAM implementation are closed.
  PAM operational documentation and support runbooks are completed
  Knowledge transfer is completed to enable NBKI teams to operate and support the solution after contractor handover.

Any Other Comments
Evening and weekend work will be required to make changes to IT systems out of hours.