IAM Security Engineer

AxiaMetrics

Coventry

On-site

GBP 90,000 - 130,000

Full time

5 days ago

Be an early applicant

Get a reply from this employer

Your resume and cover letter, tailored to exactly what they’re hiring for.

Get past ATS filters

Job summary

AxiaMetrics LLP in the United Kingdom is seeking a Senior Privileged Identity Management (PIM) & Privileged Access Management (PAM) Engineer to design, implement, and support enterprise-class privileged access and identity security solutions.

You will strengthen the organisation's Zero Trust security framework by securing privileged accounts, service accounts, and critical infrastructure across on‑prem, cloud, and hybrid environments.

Qualifications

Extensive experience in IAM/CYBER security with PAM implementations.
Proven ability to design and support enterprise PAM/PIM solutions.
Experience with cloud and hybrid environments; zero-trust principles.

Responsibilities

Design, implement, and administer enterprise PAM solutions.
Secure privileged accounts and credentials across on‑premise, cloud, and hybrid environments.
Configure session monitoring, credential vaulting, and password rotation.
Collaborate with IAM/IGA teams on governance and access reviews.
Develop automation and runbooks for PAM provisioning and monitoring.

Skills

Identity & Access Management

Cyber Security

PAM solutions

Troubleshooting

Operational support

Tools

Microsoft Entra ID

CyberArk

BeyondTrust

Delinea

Azure

AWS

Job description

Role activation approval workflows

We are seeking an experienced Senior Privileged Identity Management (PIM) & Privileged Access Management (PAM) Engineer to design, implement, and support enterprise-class privileged access and identity security solutions. The successful candidate will play a key role in strengthening the organisation’s Zero Trust security framework by securing privileged accounts, administrative access, service accounts, and critical infrastructure across on-premises, cloud, and hybrid environments.

The ideal candidate will have strong expertise in Microsoft Entra ID PIM, CyberArk, BeyondTrust, Delinea, Azure, AWS, and Identity & Access Management (IAM) technologies, with proven experience delivering PAM transformation and governance initiatives within large enterprise environments.

Key Responsibilities

Privileged Access Management

Design, implement, and administer enterprise PAM solutions.
Secure privileged accounts, shared accounts, service accounts, and application credentials.
Implement credential vaulting, password rotation, and session management controls.
Configure privileged session monitoring, recording, and auditing capabilities.
Develop and maintain PAM operational procedures and standards.
Support PAM onboarding activities across infrastructure, applications, databases, and cloud platforms.

Privileged Identity Management

Implement and manage Microsoft Entra ID Privileged Identity Management (PIM).
Configure:
- Just-in-Time (JIT) access
- Just-Enough Access (JEA)
- Role activation approval workflows
- Time-bound privileged access
- Access reviews
- Privileged role governance
Implement Role-Based Access Control (RBAC) and Attribute-Based Access Control (ABAC) frameworks.
Support identity lifecycle management and privileged access certification processes.

Cloud Security (Azure & AWS)

Secure privileged access across Microsoft Azure and AWS environments.
Implement privileged access controls for:
- Azure subscriptions
- Azure Management Groups
- Microsoft Entra ID roles
- AWS IAM roles
- AWS Organizations
- AWS privileged accounts
Integrate PAM controls within cloud-native and hybrid architectures.
Support cloud security and Zero Trust initiatives.

Identity & Access Management Integration

Integrate PAM solutions with:
- Microsoft Entra ID
- Active Directory
- LDAP
- SailPoint
- Saviynt
- ServiceNow
- Okta
- Ping Identity
Support Single Sign-On (SSO), Multi-Factor Authentication (MFA), and identity federation initiatives.
Work closely with IAM and IGA teams on privileged access governance.

Security Operations & Compliance

Support audit and compliance activities related to privileged access controls.
Perform privileged account reviews and access certification exercises.
Investigate privileged access incidents and security events.
Develop reporting and dashboards for privileged access metrics and compliance monitoring.
Ensure alignment with Zero Trust and least-privilege security principles.

Automation & Engineering

Develop automation scripts for PAM provisioning and administration.
Automate onboarding, password management, account discovery, and reporting processes.
Integrate PAM solutions with ITSM and workflow platforms.
Support Infrastructure as Code (IaC) and DevSecOps privileged access requirements.

Experience

Required Skills & Experience

5-10+ years of experience in Identity & Access Management or Cyber Security.
3-5+ years of hands‑on experience implementing and supporting PAM solutions.
Experience working in enterprise‑scale environments with regulatory and compliance requirements.
Strong troubleshooting and operational support experience.

Technical Skills

Microsoft Security Technologies