PAM Consultant

Candidate Source - TEAM; City Of London; Hybrid; GBP 111,000 - 120,000; Full time

Benefits offered by this job

Hybrid London/remote

5-month contract

Outside IR35

Job summary

Candidate Source Ltd is seeking a PAM Consultant to own enterprise identity security platforms, strengthen privileged access controls and shape security across a complex cloud environment.

This hands-on contract runs for five months with hybrid London and remote work. You’ll work with Delinea Secret Server, Saviynt IGA, Azure and AWS and influence security architecture, automation and operational improvements.

Eligibility for UK SC clearance is required; experience with Entra ID and PKI is a plus.

Qualifications

• Strong enterprise IDAM and privileged access management engineering experience.
• Hands-on experience with Delinea Secret Server and Saviynt IGA.
• Strong knowledge of Microsoft Entra ID, Azure identity services and cloud security environments.
• Experience managing enterprise security platforms, including incidents, change management, releases and risk mitigation.
• Eligibility for UK Security Check (SC) clearance.
• Enterprise PKI or AppViewX experience would be advantageous but isn't essential.

Responsibilities

• Manage and optimise Delinea Secret Server, Saviynt IGA and wider identity security platforms.
• Improve privileged access controls, IDAM processes and security automation.
• Support the onboarding of critical applications into enterprise identity services.
• Investigate security incidents, resolve platform issues and manage patching and releases.
• Work with cloud security engineers to strengthen identity controls across Azure, Entra ID and AWS.
• Support security architecture improvements, including emerging risks involving AI and non-human identities.

Skills

IDAM engineering

Privileged access mgmt

Security automation

Tools

Delinea Secret Server

Saviynt IGA

Microsoft Entra ID

Azure

AWS

Job description

Protecting critical systems starts with controlling who has access, how it's managed and where the risks sit. As a PAM Consultant, you'll take ownership of enterprise identity security platforms, strengthen privileged access controls and help shape security across a complex cloud environment.

This is a hands-on contract where you'll work with Delinea Secret Server, Saviynt IGA and cloud identity technologies across Azure and AWS. You'll have the opportunity to influence technical decisions, improve existing security processes and tackle emerging challenges around AI and non-human identities.

What's in it for you

• £600-£650 per day, outside IR35.
• Initial 5-month contract with meaningful technical scope.
• Hybrid working arrangement combining London and remote working.
• Ownership of enterprise identity security platforms and controls.
• Exposure to Delinea, Saviynt, AppViewX PKI, Azure and AWS technologies.
• Opportunity to influence security architecture, automation and technical improvements.

Your responsibilities as PAM Consultant

• Manage and optimise Delinea Secret Server, Saviynt IGA and wider identity security platforms.
• Improve privileged access controls, IDAM processes and security automation.
• Support the onboarding of critical applications into enterprise identity services.
• Investigate security incidents, resolve platform issues and manage patching and releases.
• Work with cloud security engineers to strengthen identity controls across Azure, Entra ID and AWS.
• Support security architecture improvements, including emerging risks involving AI and non-human identities.

What we're looking for in a PAM Consultant

• Strong enterprise IDAM and privileged access management engineering experience.
• Hands-on experience with Delinea Secret Server and Saviynt IGA.
• Strong knowledge of Microsoft Entra ID, Azure identity services and cloud security environments.
• Experience managing enterprise security platforms, including incidents, change management, releases and risk mitigation.
• Eligibility for UK Security Check (SC) clearance. Enterprise PKI or AppViewX experience would be advantageous but isn't essential.

Candidate Source Ltd is an advertising agency. Once you have submitted your application it will be passed to the third party Recruiter who is responsible for processing your application. This will include holding and sharing your personal data, our legal basis for this is legitimate interest subject to your declared interest in a job. Our privacy policy can be found on our website and we can be contacted to confirm who your application has been forwarded to.