Privileged Access Management (PAM) Specialist

Social network you want to login/join with:

Privileged Access Management (PAM) Specialist

Client: Axiom Software Solutions Limited

Location: Remote – UK and Europe

Type: Subcontract

Job Description:

We are seeking an experienced Privileged Access Management (PAM) Specialist to lead the rollout and operationalization of a PAM solution across the client’s on-premise production environments. The candidate will play a crucial role in enhancing security posture by managing and securing privileged accounts, especially in the context of a business that handles sensitive financial transactions and player data 24/7.

Key Responsibilities:

1. Design and implement a Privileged Access Management (PAM) solution aligned to the client’s security strategy and compliance requirements (e.g., ISO 27001, PCI-DSS, local gambling regulations).
2. Work closely with infrastructure, security, and operations teams to integrate PAM into existing systems, including Linux and Windows servers, databases, network appliances, and DevOps toolchains.
3. Develop operational playbooks, onboarding procedures, and access governance policies for privileged accounts.
4. Implement session recording, credential vaulting, and just-in-time access mechanisms.
5. Define workflows for access approval, monitoring, and periodic revalidation.
6. Train internal teams to manage and support the PAM platform once in production.
7. Provide expertise on incident response and audit support involving privileged access.

Ideal Candidate Profile:

1. 8+ years of experience in Information Security with at least 2–3 years in PAM-specific roles.
2. Hands-on experience with PAM tools such as CyberArk, BeyondTrust, Delinea (Thycotic), or HashiCorp Vault.
3. Strong understanding of security best practices in high-volume, high-risk environments such as online gambling or financial services.
4. Knowledge of infrastructure and operating system administration (Linux, Windows, Active Directory).
5. Familiarity with compliance frameworks relevant to the industry (e.g., PCI-DSS, GDPR, ISO 27001).
6. Excellent stakeholder management and documentation skills.