Our Purpose

Mastercard powers economies and empowers people in 200+ countries and territories worldwide. Together with our customers, we’re helping build a sustainable economy where everyone can prosper. We support a wide range of digital payments choices, making transactions secure, simple, smart and accessible. Our technology and innovation, partnerships and networks combine to deliver a unique set of products and services that help people, businesses and governments realize their greatest potential.

Title and Summary

Senior PAM Support Engineer:

Overview:

This is an exciting opportunity to be part of the function overseeing Security for Vocalink Limited, a company that enables the payments of 90% of salaries, 70% of utility bills, most ATM transactions and every cheque cleared in the UK.

The successful candidate will become part of a high functioning team, dedicated to delivering a robust, secure, and resilient service to 60+million citizens every day with transactional volume of 11 billion/year and total annual transactional value in excess of GBP6 Trillion.

The Senior PAM Support Engineer is part of a team playing a crucial role in designing, implementing, operating and overseeing the company's Privileged Access Management solutions. The ideal candidate will help define, enhance, and implement Vocalink's information security processes, while ensuring consistent administration of information security assets and controls to effectively improve security posture.

Role

• Senior Privileged Access Management (PAM) BAU engineer, performing operational tasks, ensuring they are delivered on time and meet the set specifications.

• Work closely with the PAM manager to drive changes throughout the PAM team to improve Vocalink’s identity security posture.

• Regularly review and refine PAM policies to ensure they align with industry best practices and regulatory standards.

• Monitor and respond to any security breaches or irregularities within the PAM systems.

• Provide guidance and mentorship to junior team members, fostering a culture of continuous learning and improvement.

• Review the configuration of existing systems or solutions and identify security issues which require a change to its configuration, provide improvement recommendations and escalate any potential risks helping ensure security risks are pro-actively managed.

• About You

• Track record of operating Self-Hosted Cyber Ark PAS in regulated environments

• Cyber Ark CDE (Certified Delivery Engineer), Sentry or Guardian certified

• Detailed exposure to the Cyber Ark Self-Managed product suite – EPV, PVWA, CPM, CP/CCP, PSM, PSMP, PTA, DNA, EPM, Telemetry

• Good understanding of HSM technologies as they relate to Cyber Ark

• Good understanding of Active Directory, Wintel and Unix/Linux in a PAM/Cyber Ark context

• Experience of connector development for Cyber Ark PSM and CPM

• Exposure to, and willingness to learn, other PAM technologies in use within Mastercard/Vocalink (e.g. Hashicorp)

• Ability to articulate themselves clearly and concisely to a broad range of senior and junior stakeholders, acting as a bridge as well as guide for the implementation of new capabilities.

• Problem solving – excellent analysis and deductive skills.

• Customer focus – passion for excellence

• Ethics – strong personal and professional ethics

• Highly motivated, detail-focused and conscientious individual

• Embodies and demonstrates all the brand values required by Vocalink and Mastercard

• Strong team player – leads by example

• SC Cleared, or willing and able to be SC cleared

Corporate Security Responsibility

All activities involving access to Mastercard assets, information, and networks comes with an inherent risk to the organization and, therefore, it is expected that every person working for, or on behalf of, Mastercard is responsible for information security and must:

• Abide by Mastercard’s security policies and practices;

• Ensure the confidentiality and integrity of the information being accessed;

• Report any suspected information security violation or breach, and

• Complete all periodic mandatory security trainings in accordance with Mastercard’s guidelines.