PAM Engineer (Windows Specialist)

Experis - ManpowerGroup; Wokingham; Hybrid; GBP 111,000 - 115,000; Full time

Job summary

Experis - ManpowerGroup in the UK is seeking a PAM Engineer (Windows Specialist) for a Wokingham-based role with a 50/50 hybrid setup. You will design, implement, and optimise privileged access controls across a complex enterprise environment.

The ideal candidate has strong PAM, Windows Server, Active Directory, and IAM expertise, plus experience with password vaulting, MFA, and audit support. This contract role offers daily rates of £600–£625 inside IR35 and requires active SC clearance.

Qualifications

• Experience implementing Privileged Access Management (PAM) solutions.
• Expertise in Windows Server Administration, Active Directory, and IAM.
• Knowledge of MFA, privileged session management, and access governance.
• Experience integrating PAM with Windows and Entra ID.
• Strong scripting and automation skills with PowerShell.

Responsibilities

• Design, implement, and maintain enterprise PAM solutions.
• Onboard privileged accounts into PAM platforms and configure vaulting and rotation.
• Monitor privileged activity and support audits and remediations.
• Develop automation for onboarding, password management, and reporting.
• Provide Level 2/3 support for PAM-related incidents.

Skills

PAM engineering

Windows Server Administration

Active Directory

Microsoft Entra ID (Azure AD)

Identity & Access Management (IAM)

PowerShell scripting

Automation

Tools

CyberArk

BeyondTrust

Delinea

Job description

PAM Engineer (Windows Specialist)

Location: Wokingham (Hybrid, 50% onsite / 50% remote)
Duration: Initial 3-Month Contract
Rate: £600.00 - £625.00 per day (Inside IR35)
Clearance Required: Active SC Clearance

The Opportunity

We're seeking an experienced PAM Engineer (Windows Specialist) to join a security-focused team responsible for securing privileged access across a complex enterprise environment.

This role is ideal for someone with strong expertise in Privileged Access Management (PAM), Windows Server, Active Directory, and Identity & Access Management (IAM). You'll play a key role in designing, implementing, and optimising privileged access controls to reduce risk, improve compliance, and strengthen overall security posture.

Key Responsibilities

PAM Engineering & Administration

• Design, implement, and maintain enterprise PAM solutions.
• Onboard privileged, administrative, and service accounts into PAM platforms.
• Configure password vaulting, credential rotation, session monitoring, and access workflows.
• Perform platform upgrades, patching, and ongoing maintenance.
• Develop and enforce PAM policies and security controls.

Windows & Identity Security

• Integrate PAM solutions with Windows Server environments.
• Secure Domain Admin, Enterprise Admin, and Local Admin accounts.
• Implement Just-In-Time (JIT) and Just-Enough Administration (JEA) controls.
• Integrate PAM with Active Directory and Microsoft Entra ID.
• Support privileged account lifecycle management and governance.

Security & Compliance

• Monitor privileged account activity and investigate security events.
• Support internal and external audits through reporting and evidence collection.
• Work with Security, Risk, and Compliance teams to address findings and remediation actions.
• Maintain documentation, standards, and operational procedures.

Automation & Support

• Develop automation using PowerShell and other scripting tools.
• Improve onboarding, password management, and reporting processes.
• Provide Level 2/3 support for PAM-related incidents and service requests.
• Collaborate with Infrastructure, Security, Cloud, and Application teams on access management initiatives.

Essential Skills & Experience

• Strong experience implementing and supporting Privileged Access Management (PAM) solutions.
• Expertise in:
• Windows Server Administration
• Active Directory
• Microsoft Entra ID (Azure AD)
• Identity & Access Management (IAM)
• Experience securing privileged and administrative accounts.
• Knowledge of MFA, privileged session management, and access governance.
• Strong PowerShell scripting and automation skills.
• Experience supporting security audits and compliance requirements.
• Excellent troubleshooting, stakeholder management, and documentation skills.

Desirable Skills

• Experience with enterprise PAM platforms such as CyberArk, BeyondTrust, Delinea, or similar.
• Knowledge of Zero Trust and Privileged Access strategies.
• Experience working in highly regulated or security-sensitive environments.

What We're Looking For

You’ll be a technically strong security professional with a passion for identity security and privileged access management. Comfortable working across infrastructure and security teams, you’ll combine hands‑on engineering expertise with a proactive approach to improving security controls and reducing organisational risk.

If you’re an SC-cleared PAM Engineer with strong Windows, Active Directory, and IAM experience, we’d love to hear from you.

If you receive suspicious outreach claiming to be from us, please contact us via the ManpowerGroup website.