Privileged Access Engineer

GANYMEDE SOLUTIONS LIMITED; London; Hybrid; GBP 125,000 - 150,000; Full time

Job summary

A leading company is seeking an experienced PAM / ALM Consultant / Privileged Access Engineer for a contract role based in London or remote. You will spearhead the secure migration of privileged accounts in a cutting-edge PAM and ALM environment, with a competitive daily rate of £500 outside IR35. The ideal candidate will possess extensive PAM experience, scripting skills, and a strong technical background in Active Directory and related technologies.

Qualifications

• Extensive hands-on experience with PAM platforms is essential.
• Strong technical foundation in Active Directory, LDAP, SAML, Azure AD.
• Excellent communication and troubleshooting skills.

Responsibilities

• Lead the migration of privileged accounts into PAM/ALM environment.
• Design, build, test, and secure migration of outstanding accounts.
• Ensure controlled credential management with minimal disruption.

Skills

Privileged Access Management (PAM)

Account Lifecycle Management (ALM)

Scripting (PowerShell, Python)

Active Directory

LDAP

SAML

Azure AD

Hybrid Identity Management

Communication

Analytical Skills

Job description

Social network you want to login/join with:

PAM / ALM Consultant / Privileged Access Engineer – Outside IR35 Contract – £500/day – London / Remote

We are supporting one of our key clients in appointing an experienced PAM / ALM Consultant /Privileged Access Engineer to lead the secure migration of privileged accounts into their existing Privileged Access Management (PAM) and Account Lifecycle Management (ALM) environment. This contract is offered at £500 per day, outside IR35, for an initial 6 month term with strong potential for extension.

The successful consultant will take ownership of the remaining phases of the PAM implementation, building on an existing Delinea (Secret Server and ALM) deployment. The primary focus will be to design, build, test, and securely migrate outstanding privileged and service accounts into ALM, ensuring controlled credential management, secure access, and minimal disruption to operational services throughout the process.

Extensive hands-on experience with PAM platforms is essential, ideally with Delinea, though experience with other solutions such as CyberArk, BeyondTrust or similar will also be considered. A strong technical foundation in Active Directory, LDAP, SAML, Azure AD, and hybrid identity management is required, alongside scripting skills (PowerShell, Python or similar) to support automation and integration tasks. You must demonstrate excellent communication, documentation, analytical and troubleshooting skills, with the ability to work independently while coordinating across multiple teams.

Additional exposure to regulatory frameworks such as NIS, ISO 27001, NIST-800 or Cyber Essentials would be beneficial, as would experience with DevOps and cloud-based PAM strategies.

The environment is largely based on Microsoft and VMware on-premises infrastructure, with some applications hosted within Azure cloud.

Ganymede is committed to creating a diverse workforce and is an equal opportunities employer. We welcome applications from all suitably qualified persons regardless of age, disability, gender, marriage and civil partnership, pregnancy and maternity, race, religion or belief, sex, and sexual orientation