SC PAM Engineer

Experis; Wokingham; Hybrid; GBP 60,000 - 90,000; Full time

Benefits offered by this job

Hybrid work arrangement

Contract until 09/02/2027

Job summary

Experis in the United Kingdom is seeking an experienced PAM Engineer with Linux specialist capability to design, implement, and support privileged access management across a complex enterprise. Hybrid onsite pattern in Wokingham is required.

Active SC Clearance is necessary and the role emphasizes Windows infrastructure security, Active Directory, identity management, and automation. The position involves managing password vaulting, credential rotation, MFA for privileged access, auditing, and

Qualifications

• Experience designing, implementing, and supporting PAM solutions in enterprise environments.
• Active SC Clearance.
• Expertise in Windows Server Administration, Active Directory, IAM, and Cyber Security.
• Experience integrating PAM with Windows Server environments, Active Directory, and Microsoft Entra ID (Azure AD).
• Knowledge of password vaulting, credential rotation, access request workflows, session monitoring, and privileged session recording.
• Experience with privileged account lifecycle management, MFA, and access reviews.
• Ability to develop automation solutions using PowerShell and other scripting tools.
• Provide Level 2 and Level 3 PAM support.

Responsibilities

• Design, implement, and maintain enterprise PAM solutions.
• Onboard privileged accounts and admin/service accounts into PAM platforms.
• Configure password vaulting, credential rotation, access workflows, and session monitoring.
• Administer PAM policies and controls.
• Perform platform upgrades and maintenance.
• Integrate PAM with Windows Server environments and Microsoft-based platforms.
• Implement just-in-time and just-enough administration controls.
• Manage privileged session recording and auditing.
• Support privileged account lifecycle management and governance processes.
• Implement MFA for privileged access.
• Monitor activity and investigate anomalous events.
• Support audits with evidence and access reports.
• Maintain PAM configuration documentation.
• Develop automation with PowerShell and scripting tools.
• Collaborate with Infrastructure, Security, Cloud, and App teams.

Skills

PAM engineer

Linux specialist

Active Directory

PowerShell scripting

Automation

Level 2/3 support

Just-in-time access

Just-enough administration

Hybrid work

Tools

Azure AD

Windows Server

PAM platforms

PowerShell

Microsoft Entra ID

Job description

Salary: £60,000 - 90,000 per year

Requirements

• We require active SC Clearance.
• We are seeking an experienced PAM Engineer with Linux specialist capability.
• We need strong experience in designing, implementing, supporting, and optimizing Privileged Access Management solutions in a complex enterprise environment.
• We require expertise in Windows Server Administration, Active Directory, Identity & Access Management, and Cyber Security.
• We need experience integrating PAM solutions with Windows Server environments, Active Directory, and Microsoft Entra ID (Azure AD).
• We require knowledge of password vaulting, credential rotation, access request workflows, session monitoring, and privileged session recording.
• We need experience with privileged account lifecycle management, governance processes, MFA for privileged access, and access reviews.
• We require the ability to develop automation solutions using PowerShell and other scripting tools.
• We need experience providing Level 2 and Level 3 support for PAM-related incidents and requests.
• We require the ability to work in a hybrid arrangement, onsite 2/3 days per week in Wokingham.

Responsibilities

• We design, implement, and maintain enterprise PAM solutions.
• We onboard privileged accounts, administrative credentials, and service accounts into PAM platforms.
• We configure password vaulting, credential rotation, access request workflows, and session monitoring.
• We administer PAM policies and controls in line with security and compliance requirements.
• We perform platform upgrades, patching, and ongoing maintenance activities.
• We integrate PAM solutions with Windows Server environments and secure privileged accounts across Microsoft-based platforms.
• We implement just-in-time and just-enough administration controls where applicable.
• We manage privileged session recording and auditing capabilities.
• We support privileged account lifecycle management and governance processes.
• We implement multi-factor authentication for privileged access.
• We manage group memberships, elevated permissions, and delegated administrative rights.
• We monitor privileged account activity and investigate anomalous access events.
• We support internal and external audits by providing evidence and access reports.
• We ensure compliance with security frameworks and regulatory requirements.
• We partner with Security Operations, Risk, and Compliance teams to address findings and implement remediation actions.
• We maintain detailed documentation of PAM configurations, processes, and standards.
• We develop automation solutions using PowerShell and other scripting tools.
• We streamline account onboarding, password management, and reporting processes.
• We contribute to PAM roadmap initiatives and continuous service improvements.
• We provide Level 2 and Level 3 support for PAM-related incidents and requests.
• We participate in maintenance windows and on-call support activities when required.
• We collaborate with Infrastructure, Security, Cloud, and Application teams on access management projects.
• We act as a subject matter expert for privileged access security controls.

Technologies

• Active Directory
• Azure
• Cloud
• Support
• Linux
• PowerShell
• Security
• Windows
• DevOps
• I AM? Wait original said "IAM" they want 'IAM'? It says
• IAM
. So keep "IAM".

More

We are offering a contract running until 09/02/2027 with potential for extension, based in Wokingham with a hybrid working pattern of 2/3 days per week onsite. The rate is up to £625.60 per day via umbrella inside IR35. This role focuses on securing privileged access across a complex enterprise environment, with a strong emphasis on Windows infrastructure security, Active Directory, identity management, compliance, automation, and continuous service improvement.

last updated 38 week of 2026