Privileged Access Engineer

Ganymede Solutions Ltd; London; Hybrid; GBP 125,000 - 150,000; Full time

Job summary

A leading company is seeking a PAM / ALM Consultant / Privileged Access Engineer to lead the secure migration of privileged accounts within their PAM/ALM environment. This contract role, at a competitive rate of £500/day, offers the potential for extension and requires extensive PAM experience, strong scripting skills, and excellent communication abilities.

Qualifications

• Extensive hands-on experience with PAM platforms, ideally Delinea.
• Strong technical foundation in Active Directory, LDAP, SAML, and Azure AD.
• Scripting skills in PowerShell or Python for automation.

Responsibilities

• Lead the secure migration of privileged accounts into PAM and ALM.
• Design, build, and test secure migration of privileged accounts.
• Ensure controlled credential management and minimal disruption.

Skills

Privileged Access Management (PAM)

Account Lifecycle Management (ALM)

Active Directory

Scripting (PowerShell, Python)

Communication

Troubleshooting

Job description

PAM / ALM Consultant / Privileged Access Engineer – Outside IR35 Contract – £500/day – London / Remote

We are supporting one of our key clients in appointing an experienced PAM / ALM Consultant /Privileged Access Engineer to lead the secure migration of privileged accounts into their existing Privileged Access Management (PAM) and Account Lifecycle Management (ALM) environment. This contract is offered at £500 per day, outside IR35, for an initial 6 month term with strong potential for extension.

The successful consultant will take ownership of the remaining phases of the PAM implementation, building on an existing Delinea (Secret Server and ALM) deployment. The primary focus will be to design, build, test, and securely migrate outstanding privileged and service accounts into ALM, ensuring controlled credential management, secure access, and minimal disruption to operational services throughout the process.

Extensive hands-on experience with PAM platforms is essential, ideally with Delinea, though experience with other solutions such as CyberArk, BeyondTrust or similar will also be considered. A strong technical foundation in Active Directory, LDAP, SAML, Azure AD, and hybrid identity management is required, alongside scripting skills (PowerShell, Python or similar) to support automation and integration tasks. You must demonstrate excellent communication, documentation, analytical and troubleshooting skills, with the ability to work independently while coordinating across multiple teams.

Additional exposure to regulatory frameworks such as NIS, ISO 27001, NIST-800 or Cyber Essentials would be beneficial, as would experience with DevOps and cloud-based PAM strategies.

The environment is largely based on Microsoft and VMware on-premises infrastructure, with some applications hosted within Azure cloud.

For more information in regards to this Privileged Access Engineer contract, contact [e-mail] or call Will on 07773034739.

Ganymede is committed to creating a diverse workforce and is an equal opportunities employer. We welcome applications from all suitably qualified persons regardless of age, disability, gender, marriage and civil partnership, pregnancy and maternity, race, religion or belief, sex, and sexual orientation