Identity Security Engineer

Queen Square Recruitment; Coventry; On-site; GBP 65,000 - 95,000; Full time

Job summary

Queen Square Recruitment is seeking an experienced IAM/PAM specialist to administer BeyondTrust PAM solutions and manage privileged accounts across hybrid environments in the UK. You will implement and maintain PIM, JIT access, and RBAC across enterprise apps.

The role requires strong PowerShell automation, knowledge of Azure AD/Entra ID, SSO, and credential governance, with a focus on Zero Trust security and governance.

Qualifications

• Experience with IAM/PAM solutions in enterprise environments.
• Strong knowledge of BeyondTrust PAM components and Azure AD.
• Experience implementing PIM, JIT and RBAC controls.

Responsibilities

• Administer and support BeyondTrust PAM solutions (Password Safe, PRA, EPM).
• Manage the full lifecycle of privileged accounts (onboarding, certification, maintenance, auditing, decommissioning).
• Support Microsoft Entra ID (Azure AD) and Active Directory in hybrid environments.
• Implement and maintain PIM and Just-In-Time access controls.
• Govern service accounts; ensure compliance with security standards.
• Support credential vaulting, secrets management, and governance initiatives.
• Contribute to Identity Governance and Administration (IGA) processes (access reviews, entitlement management, access certification).
• Configure and support SSO and identity federation (SAML, OAuth, OIDC).
• Implement RBAC and least-privilege models across enterprise apps.

Skills

IAM

PAM

BeyondTrust Password Safe

PRA & EPM

Azure AD / Entra ID

Active Directory

PIM & JIT access

RBAC & Zero Trust

PowerShell scripting

SSO & Federation

Job description

• Administer and support BeyondTrust Privileged Access Management (PAM) solutions, including Password Safe, Privileged Remote Access (PRA), and Endpoint Privilege Management (EPM).
• Manage the full lifecycle of privileged accounts, including onboarding, certification, maintenance, auditing, and decommissioning.
• Support Microsoft Entra ID (Azure AD) and Active Directory identity management across hybrid environments.
• Implement and maintain Privileged Identity Management (PIM) and Just-In-Time (JIT) access controls.
• Govern and manage service accounts, ensuring compliance with security standards and regulatory requirements.
• Support credential vaulting, secrets management, and privileged credential governance initiatives.
• Contribute to Identity Governance and Administration (IGA) processes, including access reviews, entitlement management, and access certification activities.
• Configure and support Single Sign-On (SSO) and identity federation technologies including SAML, OAuth, and OpenID Connect (OIDC).
• Implement Role-Based Access Control (RBAC) and least-privilege access models across enterprise applications and platforms.
• Support identity threat detection, security monitoring, incident response, and IAM/PAM automation initiatives.

Required Skills

• Strong experience in Identity & Access Management (IAM), Privileged Access Management (PAM), or cybersecurity operations.
• Hands-on experience with BeyondTrust Password Safe, PRA, and EPM solutions.
• Strong knowledge of Microsoft Entra ID (Azure AD) and Active Directory administration.
• Experience implementing Privileged Identity Management (PIM) and Just-In-Time (JIT) access controls.
• Knowledge of identity lifecycle management, access governance, and entitlement management processes.
• Experience working with SAML, OAuth, OpenID Connect (OIDC), and Single Sign-On (SSO) technologies.
• Experience supporting credential vaulting, secrets management, and service account governance.
• Strong understanding of RBAC, least-privilege principles, and Zero Trust security models.
• Experience with identity threat monitoring, threat detection, and security incident response.
• Proficiency in PowerShell scripting and automation for IAM/PAM administration and integration activities.

Experience Required

• BeyondTrust Password Safe, PRA & EPM Support
• Microsoft Entra ID & Active Directory Management
• Privileged Identity Management (PIM) Implementation
• Identity Lifecycle & Access Governance Processes
• Identity Federation & SSO Integration
• Service Account & Secrets Management
• Identity Security Monitoring & Incident Response
• PowerShell-Based Automation & Integration

Nice to Have

• Experience with Identity Governance & Administration (IGA) platforms such as SailPoint, Saviynt, or Microsoft Identity Governance.
• Exposure to Identity Threat Detection & Response (ITDR) capabilities and identity analytics solutions.
• Experience integrating IAM/PAM solutions with cloud platforms, enterprise applications, and security monitoring tools.
• Knowledge of Azure security services and hybrid identity architectures.
• Familiarity with cybersecurity governance, audit, compliance, and access certification requirements.
• Experience supporting Zero Trust identity transformation programmes.
• Knowledge of Azure Key Vault, HashiCorp Vault, CyberArk Conjur, or similar secrets management platforms.
• Relevant certifications such as SC-300, AZ-500, CISSP, Microsoft Identity & Access Administrator, or BeyondTrust certifications.