PAM Engineer (Windows) - Hybrid, SC Cleared

undisclosed; Wokingham; Hybrid; GBP 92,000 - 115,000; Full time

Job summary

The undisclosed is seeking an experienced PAM Engineer (Linux Specialist) to design, implement, support, and optimize Privileged Access Management solutions across a complex enterprise environment. The role focuses on securing Windows-based privileged accounts, admin access, and service accounts while ensuring cybersecurity compliance.

Responsibilities include PAM design, onboarding, password vaulting, session monitoring, and AD/Entra ID integration, with automation via PowerShell to streamline

Qualifications

• Experience designing and implementing enterprise PAM solutions.
• Strong Windows Server Administration and IAM skills.
• Experience with Active Directory and Azure AD integration.
• Ability to work in hybrid/onsite environments and meet security requirements.

Responsibilities

• Design, implement, and maintain enterprise PAM solutions.
• Onboard privileged accounts, administrative credentials, and service accounts into PAM platforms.
• Configure password vaulting, credential rotation, access request workflows, and session monitoring.
• Administer PAM policies and controls in accordance with security and compliance requirements.
• Perform platform upgrades, patching, and ongoing maintenance activities.
• Integrate PAM solutions with Windows Server environments.
• Secure Domain Admin, Enterprise Admin, and Local Administrator accounts.
• Implement just-in-time (JIT) and just-enough administration (JEA) controls where applicable.
• Support privileged access controls across Windows servers, Active Directory, and Microsoft-based platforms.
• Manage privileged session recording and auditing capabilities.
• Integrate PAM solutions with Active Directory and Microsoft Entra ID (Azure AD).
• Support privileged account lifecycle management and governance processes.
• Implement Multi-Factor Authentication (MFA) for privileged access.
• Manage group memberships, elevated permissions, and delegated administrative rights.
• Assist with identity-related security initiatives and access reviews.
• Monitor privileged account activity and investigate anomalous access events.
• Support internal and external audits by providing evidence and access reports.
• Ensure compliance with security frameworks and regulatory requirements.
• Partner with Security Operations, Risk, and Compliance teams to address findings and implement remediation actions.
• Maintain detailed documentation of PAM configurations, processes, and standards.

Skills

PAM engineering

Windows security

IAM integration

Active Directory

Azure AD

PowerShell automation

Job description

The undisclosed is seeking an experienced PAM Engineer (Linux Specialist) to design, implement, support, and optimize Privileged Access Management solutions across a complex enterprise environment. The role focuses on securing Windows-based privileged accounts, admin access, and service accounts while ensuring cybersecurity compliance.

Responsibilities include PAM design, onboarding, password vaulting, session monitoring, and AD/Entra ID integration, with automation via PowerShell to streamline