PAM Operations Analyst

WSP in the UK & Ireland; Cardiff; On-site; GBP 60,000 - 90,000; Full time

Job summary

WSP is seeking a PAM Operations Analyst to design and execute privileged access management strategies, onboard and monitor privileged accounts, and collaborate with IT teams to integrate PAM into systems across environments.

The role covers audits, vulnerability checks, on-call SME support, and staying current with PAM trends; requires 5+ years in IT security with PAM specialization and hands-on experience with Delinea, CyberArk and BeyondTrust.

Qualifications

• Bachelor's degree in Information Technology, Computer Science, or a related field, or equivalent work experience.
• 5+ years of experience in IT security or a similar role, with at least 2 years of specialization in PAM practices.
• Proficiency with provisioning accounts using AD Users and Computers, PowerShell, M365, Microsoft Entra ID, and Windows Server Administration tools.
• Hands-on experience with PAM tools such as Delinea, CyberArk, BeyondTrust, or similar.
• Strong understanding of IAM principles and best practices.
• Proficiency in troubleshooting, scripting (PowerShell, Python), and system administration.
• Excellent analytical, communication, and organizational skills.
• Experience with Service Now, understanding of SLAs and the importance of meeting SLAs.

Responsibilities

• Support the design and execution of PAM strategies and policies.
• Support the implementation and maintenance of PAM tools and platforms, ensuring availability, scalability, and security.
• Onboard, maintain, and monitor privileged accounts across systems, applications, and environments.
• Collaborate with cross-functional teams to integrate PAM solutions into IT systems.
• Perform regular access reviews, audits, and reporting to ensure compliance.
• Identify and address vulnerabilities, misconfigurations, or misuse of privileged accounts.
• Create and maintain documentation for PAM processes, configurations, and guidelines.
• Train and support end-users on PAM best practices and tool usage.
• Assist in incident response and troubleshooting related to privileged account abuse or compromise.
• Stay informed on PAM trends and propose enhancements or upgrades.
• Meet SLA targets and participate in on-call rotation for SME support.

Skills

Privileged Access Management

PowerShell

Python

IAM principles

Windows Admin

AD Users and Computers

M365

Delinea

CyberArk

BeyondTrust

ServiceNow

SLA awareness

Education

Bachelor's degree in IT/CS or related field

Tools

Delinea

CyberArk

BeyondTrust

Microsoft Entra ID

Windows Server Admin tools

PowerShell

Job description

Job Description

What if you could shape a career as unique as you?

At WSP, you can always find opportunities to grow and do what matters to you. Make the most of our global reach to discover new challenges and chances to work with diverse, talented individuals who will help you expand your horizons.

Responsibilities

The PAM Operations Analyst is expected to conduct the following activities:

• Support the design and execution of PAM strategies and policies.
• Support the implementation and maintenance of Privileged Access Management tools and platforms, ensuring availability, scalability, and security.
• Onboard, maintain, and monitor privileged accounts across various systems, applications, and environments.
• Collaborate with cross-functional teams to integrate PAM solutions into existing and new IT systems.
• Perform regular access reviews, audits, and reporting to ensure adherence to compliance requirements.
• Identify and address vulnerabilities, misconfigurations, or misuse of privileged accounts.
• Create and maintain documentation for PAM processes, configurations, and guidelines.
• Train and support end-users on PAM best practices and tool usage.
• Assist in incident response and troubleshooting activities related to privileged account abuse or compromise.
• Stay informed on industry trends and emerging technologies in PAM to propose enhancements or upgrades to the PAM ecosystem.
• Meet SLA targets.
• Participate in on-call rotation to provide SME support outside of business hours, as needed
• Support regular risk assessments and audits related to privilege access.
• Collaborate with cross functional teams to ensure adherence to security standards.

Qualifications

Required

• Bachelor's degree in Information Technology, Computer Science, or a related field, or equivalent work experience.
• 5+ years of experience in IT security or a similar role, with at least 2 years of specialization in PAM practices.
• Expertise in provisioning accounts using AD Users and Computers, PowerShell, M365, Microsoft Entra ID, and Windows Server Administration tools.
• Hands-on experience with PAM tools such as Delinea, CyberArk, BeyondTrust, or similar.
• Strong understanding of identity and access management (IAM) principles and best practices.
• Proficiency in troubleshooting, scripting (PowerShell, Python), and system administration.
• Excellent analytical, communication, and organizational skills.
• Experience working in a team-oriented, collaborative environment.
• Strong technical and business acumen,
• Experience with Service Now, understanding of SLAs and the importance of meeting SLAs.

Preferred

• Certifications such as Delinea, CyberArk Defender, CISSP, CISM, or equivalent.
• Experience with securing privileged access in an enterprise environment.
• Knowledge of risk management and security assessment methodologies.

Imagine a better future for you and a better future for us all.

Work on landmark projects around the world and embrace opportunities to make an even bigger impact in the communities you care about. What if you could do the best work of your life and create a legacy for yourself?