PAM Engineer (Windows Specialist)

Experis UK; Lincoln; Hybrid; GBP 111,000 - 115,000; Full time

Job summary

Experis UK is seeking an experienced PAM Engineer to design, implement, and optimize privileged access controls across a complex enterprise environment. The role focuses on PAM, Windows Server, Active Directory, and IAM to strengthen security posture.

You will onboard privileged accounts, configure vaulting, rotation, and session monitoring while integrating with Entra ID. The position involves collaboration with Security, Infrastructure, and Compliance teams and requires strong automation via

Qualifications

• Experience implementing and maintaining Privileged Access Management (PAM) solutions.
• Expertise in Windows Server, Active Directory, Entra ID and IAM.
• Experience securing privileged and administrative accounts.
• Knowledge of MFA, privileged session management, and access governance.
• Strong PowerShell scripting and automation skills.
• Experience supporting security audits and compliance requirements.
• Excellent troubleshooting, stakeholder management, and documentation skills.

Responsibilities

• Design, implement, and maintain enterprise PAM solutions.
• Onboard privileged, administrative, and service accounts into PAM platforms.
• Configure password vaulting, credential rotation, session monitoring, and access workflows.
• Perform platform upgrades, patching, and ongoing maintenance.
• Develop and enforce PAM policies and security controls.

Skills

PAM

Windows Server

Active Directory

Entra ID

IAM

PowerShell

Automation

Audits & Compliance

Troubleshooting

Documentation

Tools

CyberArk

BeyondTrust

Delinea

Job description

Location: Wokingham (Hybrid, 50% onsite / 50% remote)

Duration: Initial 3-Month Contract

Rate: £600.00 - £625.00 per day (Inside IR35)

Clearance Required: Active SC Clearance

The Opportunity

We're seeking an experienced PAM Engineer (Windows Specialist) to join a security-focused team responsible for securing privileged access across a complex enterprise environment. This role is ideal for someone with strong expertise in Privileged Access Management (PAM), Windows Server, Active Directory, and Identity & Access Management (IAM). You'll play a key role in designing, implementing, and optimising privileged access controls to reduce risk, improve compliance, and strengthen overall security posture.

PAM Engineering & Administration

• Design, implement, and maintain enterprise PAM solutions.
• Onboard privileged, administrative, and service accounts into PAM platforms.
• Configure password vaulting, credential rotation, session monitoring, and access workflows.
• Perform platform upgrades, patching, and ongoing maintenance.
• Develop and enforce PAM policies and security controls.

Windows & Identity Security

• Integrate PAM solutions with Windows Server environments.
• Secure Domain Admin, Enterprise Admin, and Local Admin accounts.
• Implement Just-In-Time (JIT) and Just-Enough Administration (JEA) controls.
• Integrate PAM with Active Directory and Microsoft Entra ID.
• Support privileged account lifecycle management and governance.

Security & Compliance

• Monitor privileged account activity and investigate security events.
• Support internal and external audits through reporting and evidence collection.
• Work with Security, Risk, and Compliance teams to address findings and remediation actions.
• Maintain documentation, standards, and operational procedures.

Automation & Support

• Develop automation using PowerShell and other scripting tools.
• Improve onboarding, password management, and reporting processes.
• Provide Level 2/3 support for PAM-related incidents and service requests.
• Collaborate with Infrastructure, Security, Cloud, and Application teams on access management initiatives.

Essential Skills & Experience

• Strong experience implementing and supporting Privileged Access Management (PAM) solutions.
• Expertise in:
  • Windows Server Administration
  • Active Directory
  • Microsoft Entra ID (Azure AD)
  • Identity & Access Management (IAM)
• Experience securing privileged and administrative accounts.
• Knowledge of MFA, privileged session management, and access governance.
• Strong PowerShell scripting and automation skills.
• Experience supporting security audits and compliance requirements.
• Excellent troubleshooting, stakeholder management, and documentation skills.

Desirable Skills

• Experience with enterprise PAM platforms such as CyberArk, BeyondTrust, Delinea, or similar.
• Knowledge of Zero Trust and Privileged Access strategies.
• Experience working in highly regulated or security-sensitive environments.

What We're Looking For

You’ll be a technically strong security professional with a passion for identity security and privileged access management. Comfortable working across infrastructure and security teams, you’ll combine hands‑on engineering expertise with a proactive approach to improving security controls and reducing organisational risk.

If you receive suspicious outreach claiming to be from us, please contact us via the ManpowerGroup website.