PAM Engineer

undisclosed; Wokingham; Hybrid; GBP 92,000 - 115,000; Full time

Job summary

The undisclosed is seeking an experienced PAM Engineer (Linux Specialist) to design, implement, support, and optimize Privileged Access Management solutions across a complex enterprise environment. The role focuses on securing Windows-based privileged accounts, admin access, and service accounts while ensuring cybersecurity compliance.

Responsibilities include PAM design, onboarding, password vaulting, session monitoring, and AD/Entra ID integration, with automation via PowerShell to streamline

Qualifications

• Experience designing and implementing enterprise PAM solutions.
• Strong Windows Server Administration and IAM skills.
• Experience with Active Directory and Azure AD integration.
• Ability to work in hybrid/onsite environments and meet security requirements.

Responsibilities

• Design, implement, and maintain enterprise PAM solutions.
• Onboard privileged accounts, administrative credentials, and service accounts into PAM platforms.
• Configure password vaulting, credential rotation, access request workflows, and session monitoring.
• Administer PAM policies and controls in accordance with security and compliance requirements.
• Perform platform upgrades, patching, and ongoing maintenance activities.
• Integrate PAM solutions with Windows Server environments.
• Secure Domain Admin, Enterprise Admin, and Local Administrator accounts.
• Implement just-in-time (JIT) and just-enough administration (JEA) controls where applicable.
• Support privileged access controls across Windows servers, Active Directory, and Microsoft-based platforms.
• Manage privileged session recording and auditing capabilities.
• Integrate PAM solutions with Active Directory and Microsoft Entra ID (Azure AD).
• Support privileged account lifecycle management and governance processes.
• Implement Multi-Factor Authentication (MFA) for privileged access.
• Manage group memberships, elevated permissions, and delegated administrative rights.
• Assist with identity-related security initiatives and access reviews.
• Monitor privileged account activity and investigate anomalous access events.
• Support internal and external audits by providing evidence and access reports.
• Ensure compliance with security frameworks and regulatory requirements.
• Partner with Security Operations, Risk, and Compliance teams to address findings and implement remediation actions.
• Maintain detailed documentation of PAM configurations, processes, and standards.

Skills

PAM engineering

Windows security

IAM integration

Active Directory

Azure AD

PowerShell automation

Job description

Duration: contract to run until 09/02/2027 with potential for extension

Location: Wokingham. Hybrid 2/3 days per week onsite

Rate: up to £625.60 p/d Umbrellainside IR35

Clearance required: Active SC Clearance is essential

Seeking an experienced PAM Engineer (Linux Specialist) to design, implement, support, and optimize Privileged Access Management solutions across a complex enterprise environment. The successful candidate will specialize in securing Windows-based privileged accounts, administrative access, service accounts, and critical infrastructure systems while ensuring compliance with cybersecurity standards and regulatory requirements.

This role combines expertise in Windows Server Administration, Active Directory, Identity & Access Management (IAM), and Cyber Security, with a strong focus on reducing organizational risk through effective privileged access controls.

Key Responsibilities

• Design, implement, and maintain enterprise PAM solutions.
• Onboard privileged accounts, administrative credentials, and service accounts into PAM platforms.
• Configure password vaulting, credential rotation, access request workflows, and session monitoring.
• Administer PAM policies and controls in accordance with security and compliance requirements.
• Perform platform upgrades, patching, and ongoing maintenance activities.

Windows Infrastructure Security

• Integrate PAM solutions with Windows Server environments.
• Secure Domain Administrator, Enterprise Administrator, and Local Administrator accounts.
• Implement just-in-time (JIT) and just-enough administration (JEA) controls where applicable.
• Support privileged access controls across Windows servers, Active Directory, and Microsoft-based platforms.
• Manage privileged session recording and auditing capabilities.

Active Directory & Identity Management

• Integrate PAM solutions with Active Directory and Microsoft Entra ID (Azure AD).
• Support privileged account lifecycle management and governance processes.
• Implement Multi-Factor Authentication (MFA) for privileged access.
• Manage group memberships, elevated permissions, and delegated administrative rights.
• Assist with identity-related security initiatives and access reviews.

Security & Compliance

• Monitor privileged account activity and investigate anomalous access events.
• Support internal and external audits by providing evidence and access reports.
• Ensure compliance with security frameworks and regulatory requirements.
• Partner with Security Operations, Risk, and Compliance teams to address findings and implement remediation actions.
• Maintain detailed documentation of PAM configurations, processes, and standards.

Automation & Process Improvement

• Develop automation solutions using PowerShell and other scripting tools.
• Streamline account onboarding, password management, and reporting processes.
• Contribute to PAM roadmap initiatives and continuous service improvements.
• Identify opportunities to increase security while reducing manual administration overhead.

Operational Support

• Provide Level 2 and Level 3 support for PAM-related incidents and requests.
• Participate in maintenance windows and on-call support activities when required.
• Collaborate with Infrastructure, Security, Cloud, and Application teams on access management projects.
• Act as a subject matter expert for privileged access security controls.

All profiles will be reviewed against the required skills and experience. Due to the high number of applications we will only be able to respond to successful applicants in the first instance. We thank you for your interest and the time taken to apply!