Identity Security Engineer - IAM, PAM & SSO Specialist

Queen Square Recruitment; Coventry; On-site; GBP 65,000 - 95,000; Full time

Job summary

Queen Square Recruitment is seeking an experienced IAM/PAM specialist to administer BeyondTrust PAM solutions and manage privileged accounts across hybrid environments in the UK. You will implement and maintain PIM, JIT access, and RBAC across enterprise apps.

The role requires strong PowerShell automation, knowledge of Azure AD/Entra ID, SSO, and credential governance, with a focus on Zero Trust security and governance.

Qualifications

• Experience with IAM/PAM solutions in enterprise environments.
• Strong knowledge of BeyondTrust PAM components and Azure AD.
• Experience implementing PIM, JIT and RBAC controls.

Responsibilities

• Administer and support BeyondTrust PAM solutions (Password Safe, PRA, EPM).
• Manage the full lifecycle of privileged accounts (onboarding, certification, maintenance, auditing, decommissioning).
• Support Microsoft Entra ID (Azure AD) and Active Directory in hybrid environments.
• Implement and maintain PIM and Just-In-Time access controls.
• Govern service accounts; ensure compliance with security standards.
• Support credential vaulting, secrets management, and governance initiatives.
• Contribute to Identity Governance and Administration (IGA) processes (access reviews, entitlement management, access certification).
• Configure and support SSO and identity federation (SAML, OAuth, OIDC).
• Implement RBAC and least-privilege models across enterprise apps.

Skills

IAM

PAM

BeyondTrust Password Safe

PRA & EPM

Azure AD / Entra ID

Active Directory

PIM & JIT access

RBAC & Zero Trust

PowerShell scripting

SSO & Federation

Job description

Queen Square Recruitment is seeking an experienced IAM/PAM specialist to administer BeyondTrust PAM solutions and manage privileged accounts across hybrid environments in the UK. You will implement and maintain PIM, JIT access, and RBAC across enterprise apps.

The role requires strong PowerShell automation, knowledge of Azure AD/Entra ID, SSO, and credential governance, with a focus on Zero Trust security and governance.