Location: Workingham, Hybrid 2 days onsite
Contract Duration: Initial 6 months
Rate: £480/day (Inside IR35)
We’re seeking an experienced PAM Engineer to join a high-security environment. This role involves designing, implementing, and maintaining enterprise-grade PAM solutions to protect critical systems and identities. Please note: Active SC Clearance is essential. This position requires additional vetting, which may extend the onboarding timeline.
Key Responsibilities
- Design, deploy, and manage PAM solutions (e.g. CyberArk, BeyondTrust, Delinea).
- Configure and administer PAM tools to enforce least privilege and secure credential management.
- Integrate PAM systems with SIEM, IAM, and other security platforms.
- Monitor, audit, and analyse privileged access activities.
- Develop and maintain PAM-related policies, documentation, and operational processes.
- Conduct access reviews, privilege audits, and risk assessments.
- Collaborate closely with IT, DevOps, and Security teams to ensure seamless implementation.
- Provide technical troubleshooting and support for PAM issues.
- Stay up to date with evolving security standards and PAM best practices.
Required Skills & Experience
- Proven hands-on experience in PAM engineering (installation, configuration, and administration).
- CyberArk certification (minimum: Defender, Sentry, or CPC).
- Strong understanding of Active Directory, LDAP, and authentication protocols.
- Scripting experience (PowerShell, Python) for automation and reporting.
- Familiarity with compliance and regulatory frameworks (ISO 27001, NIST, GDPR).
- Excellent analytical, communication, and documentation skills.
Preferred Qualifications
- Certifications such as CISSP, CISM, or CyberArk CDE.
- Experience with cloud platforms (AWS, Azure, GCP) and hybrid infrastructures.
- Exposure to DevSecOps practices and CI/CD pipeline integration.