Identity & PAM Engineer — Zero Trust & Privileged Access

Vallum Associates; Coventry; On-site; GBP 70,000 - 100,000; Full time

Job summary

Vallum Associates is seeking an Identity Resource to implement, administer, and continuously improve IAM/PAM services across the enterprise. You will support privileged account governance, identity lifecycle, access controls, authentication technologies, and identity threat protection initiatives in alignment with Zero Trust objectives.

You will work with cybersecurity, infrastructure, and application teams to ensure secure, compliant identity, privileged access, and authentication management.

Qualifications

• Experience in IAM, PAM, or cybersecurity operations.
• Hands-on BeyondTrust PAM (Password Safe, PRA, EPM).
• Strong knowledge of Microsoft Entra ID (Azure AD) and Active Directory administration.
• Experience implementing Privileged Identity Management (PIM) and Just-In-Time (JIT) access controls.
• Understanding of identity lifecycle management, access governance, and entitlement management processes.
• Knowledge of authentication and federation technologies, including SAML, OAuth, OIDC, and Single Sign-On (SSO).
• Secrets management and service account governance.
• Understanding of RBAC, least-privilege principles, and Zero Trust security concepts.
• Experience in identity security monitoring, identity threat detection, and incident response practices.
• Proficiency in PowerShell scripting and automation for IAM/PAM administration and integration activities.
• Experience with Identity Governance and Administration (IGA) platforms such as SailPoint, Saviynt, Microsoft Identity Governance, or similar solutions.
• Exposure to Identity Threat Detection and Response (ITDR) capabilities and identity analytics platforms.
• Experience integrating IAM/PAM solutions with cloud platforms, business applications, and security monitoring tools.
• Knowledge of Azure security services and hybrid identity architectures.
• Familiarity with cybersecurity frameworks, access certification, and compliance requirements.
• Experience supporting Zero Trust identity transformation initiatives.
• Understanding of secrets management solutions such as Azure Key Vault, CyberArk Conjur, HashiCorp Vault, or equivalent platforms.
• Relevant certifications such as SC-300, AZ-500, Microsoft Identity & Access Administrator, CISSP, BeyondTrust Certification, or equivalent

Responsibilities

• Administer BeyondTrust PAM solutions (Password Safe, PRA, EPM).
• Manage privileged account lifecycle: onboarding, maintenance, certification, decommissioning.
• Support Entra ID and Active Directory identity management.
• Implement and govern PIM and JIT access controls.
• Identify and onboard service accounts per security requirements.
• Support credential vaulting and secrets management.
• Contribute to IGA processes including access reviews.
• Configure identity federation tech (SAML, OAuth, OIDC, SSO).
• Implement RBAC and least-privilege models.
• Support IAM/PAM integrations with cloud apps and monitoring tools.
• Assist identity threat detection and incident response activities.

Skills

IAM expertise

PAM experience

BeyondTrust PAM

Entra ID/Azure AD

PIM/JIT access

Identity lifecycle mgmt

RBAC/least privilege

SAML/OAuth/OIDC/SSO

Secrets management

PowerShell scripting

SailPoint/Saviynt

ITDR/identity analytics

Cloud identity integration

Zero Trust concepts

Compliance knowledge

Tools

BeyondTrust PAM

Microsoft Entra ID/Azure AD

Active Directory

Job description

Vallum Associates is seeking an Identity Resource to implement, administer, and continuously improve IAM/PAM services across the enterprise. You will support privileged account governance, identity lifecycle, access controls, authentication technologies, and identity threat protection initiatives in alignment with Zero Trust objectives.

You will work with cybersecurity, infrastructure, and application teams to ensure secure, compliant identity, privileged access, and authentication management.