IAM PAM Engineer

About us

Agap2 is a European IT and Engineering Consultancy, active in 14 countries with over 9.500 employees. The company was founded in Portugal and since 2014 we are based in the Netherlands with our Amsterdam office to provide our expertise to the Dutch market. Our employees are defined by the so-called “Agapian spirit”, which is summarized in 5 keywords: family, union, friendship, team spirit, and learning.

Did you identify with what defines us? Then read on to find out more!

The position

As a IAM PAM Engineer at agap2, you take on the challenge within an international environment with a local focus. You will have the opportunity to work on various projects over the years, based on your experience and interests. Projects within industries such as Banking, Fintech, Telco, Retail, Sports, and Healthcare.

While working at Agap2, you are expected to share your knowledge while also having the opportunity to learn new technologies. We believe that sharing knowledge is the key to personal development. Our talent management program is tailor-made to give you the opportunity to develop and grow in your career, the way you envision it. Because we work with various customers, you are also expected to be able to adapt to different environments.

Key Responsibilities

As an IAM PAM Engineer , you will design, implement, and manage advanced Privileged Access Management solutions within TechNL’s IAM Transformation Program. You will strengthen privileged identity security, automate access processes, and integrate PAM with existing cloud and hybrid infrastructures.

You will collaborate with the Enablement and Platform teams to deliver modern PAM services

• Design, implement, and manage PAM solutions using Microsoft Entra ID PIM and, where relevant, CyberArk
• Build PAM workflows for privileged identity lifecycle management, approvals, access elevation, and monitoring
• Develop reusable Terraform modules to automate and standardize PAM & IAM infrastructure
• Build CI/CD pipelines using GitHub Actions to deploy PAM configurations and policies
• Integrate PAM with IAM ecosystem: Entra ID, Azure AD groups, RBAC, SailPoint
• Support onboarding of engineering teams into PAM, including access modeling and role mapping
• Configure Azure RBAC, Conditional Access, and least-privilege access scenarios
• Monitor PAM usage, support audits, produce compliance reporting
• Assess and optimize PAM processes, promoting automation and security best practices
• Troubleshoot, maintain, and optimize PAM services across cloud and hybrid platforms

What you bring to the position

• HBO/WO degree in Computer Science, Cybersecurity, or equivalent
• 3+ years as a PAM Engineer / IAM Engineer / Cloud Security Engineer in enterprise environments
• Deep knowledge of Microsoft Entra ID PIM (mandatory)
• Experience with Terraform and IaC best practices (mandatory)
• Experience with GitHub Actions for CI/CD automation (mandatory)
• Knowledge of Azure RBAC, Conditional Access, and Identity Governance
• Experience with hybrid identity environments (Azure + on-prem)
• Experience with CyberArk (nice to have)
• Strong communication skills in Dutch and English
• Analytical, proactive, and security-driven

What we offer

• Competitive Salary & Benefits: Including a laptop, mobile phone, full travel allowance and pension plan.
• Work-Life Balance: 25 vacation days, flexible working hours in a hybrid mode.
• Professional Growth: Weekly Dutch classes and a tailored talent management program with a financial budget to help you achieve your professional goals.
• Dynamic Culture: Diverse team activities from tech meetups to sports and social events.

Is there still room for fun? Of course! The combination of fun and development is essential in our team. A small impression: our team consists of more than 10 nationalities, we play paddle and regularly organize tech meetups, happy hours drinks, and pub quizzes.

At agap2 we defend equality and value diversity. We create a safe, diverse environment where opportunities are equal for all employees. All candidates with skills matching the position are welcome to join us!