Privileged Access Management Engineer (L3)

About the Role

We are looking for a PAM Engineer to join our partner, the IT service organization of a large international retail group, based in Budapest. As a PAM Engineer, you will run and evolve the group's privileged access and password management platforms (Beyond. Trust and Bitwarden on Azure Kubernetes), automate and integrate them with the wider IAM and ITSM landscape.

This is an L3-level role, for an experienced professional, with roughly 5–7 years of relevant experience. You will work autonomously within an L3 team of about 10–15 people, collaborating closely with IT Security, Infrastructure, IAM and DevOps teams. Work Model Hybrid: 2 days in the office, 3 days home office Standard working hours, no on-call rotation, no extreme shift work Key Responsibilities Run the PAM platforms: operate and continuously improve the Beyond.

Trust PAM environment and the Bitwarden password manager on AKS Manage privileged access: handle privileged identities, credentials, related security solutions, turn PAM requirements into working solutions Automate and integrate: build automations and integrations (Power. Shell, REST APIs, CI/CD) and connect PAM processes to IAM, ticketing and monitoring Own L3 topics: independently handle incidents, technical problems and complex L3 tasks Document: keep requirements, architectures and solutions clearly documented Requirements PAM implementation and operations, with hands-on Beyond.

Trust experience (policies, workflows, account onboarding, session management, credential lifecycle) Password manager operations, ideally Bitwarden (configuration, updates, integration, user support) Kubernetes, ideally AKS (deployment, scaling, monitoring, troubleshooting) Solid Microsoft Azure experience in production (resource management, networking, security) Power.

Shell automation and REST API integration SQL and databases for analysis, reporting and troubleshooting Good Excel skills for reporting and quality checks (e.g. access reviews, account inventories) Nice to have IAM concepts and their interaction with PAM Active Directory and identity directories Service. Now or other ITSM tools (approvals, requests, incident/change processes) Git-based workflows for scripts, configurations and documentation Benefits Fast, transparent selection: after a short intro call with Virgo, 1–2 interview rounds directly with the technical decision-makers Flexible employment: employee or contractor arrangement through Virgo Long-term opportunity to transition in-house with our partner A dedicated Buddy supports you with onboarding and professional development A constantly growing organization with increasing opportunities Comprehensive training period and professional trainings Team building opportunities