Security Consultant

PRACYVA; Greater London; Hybrid; GBP 90,000 - 120,000; Full time

Job summary

PRACYVA is seeking a Senior IAM Engineer to support IAM service transition, privileged access transformation, and identity security improvements across Entra ID, Active Directory, CyberArk and ServiceNow. The role will drive operational handover, strengthen access controls and governance for human and non-human identities.

The candidate should demonstrate critical thinking and the ability to work independently to a high standard, collaborating with teams across security and IT operations.

Qualifications

• 5+ years of IAM engineering experience in complex environments.
• Hands-on expertise with Entra ID, Active Directory and PAM tooling.
• Strong governance, policy and risk-aware mindset.

Responsibilities

• Support handover of IAM BAU operations into a centralized IAM function.
• Define IAM service scope operating model and RACI across support teams.
• Drive transition planning, resource onboarding and knowledge transfer.
• Create/update SOPs, process documentation and operational runbooks.
• Configure and optimize ServiceNow groups, workflows and ticket routing.
• Define and track IAM operational metrics, KPIs and reporting.
• Implement Just-In-Time privileged access using Entra PIM.
• Migrate standing access to RBAC via groups and manage Tier0 controls.
• Configure approval workflows and breakglass accounts with monitoring.
• Build ServiceNow request workflows for privileged access.

Skills

IAM engineering

Entra ID

Active Directory

Privileged access management

ServiceNow

CyberArk

Governance

Tools

ServiceNow

CyberArk

Entra ID

Entra PIM

Job description

Senior IAM Engineer to support IAM service transition privileged access transformation and identity security improvements across Entra ID Active Directory CyberArk and ServiceNow The role will drive operational handover strengthen access controls and improve governance across both human and nonhuman identities Capable of critical thinking constructively challenging ideas and working independently to a high standard

Key Responsibilities

IAM Service Transition Operations

Support handover of IAM BAU operations into a centralized IAM function

Define IAM service scope operating model and RACI across support teams

Drive transition planning resource onboarding and knowledge transfer

Createupdate SOPs process documentation and operational runbooks

Configure and optimize ServiceNow groups workflows and ticket routing

Define and track IAM operational metrics KPIs and reporting

Privileged Access Management Entra PIM

Implement JustinTime JIT privileged access using Entra PIM

Migrate standing access to eligible rolebased access via groups

Configure approval workflows and Tierbased access controls incl Tier 0

Implement and manage breakglass accounts with monitoring and controls

Support access recertification and removal of overpermissioned access

Define and manage Entraonly privileged account model and lifecycle

Build ServiceNow request workflows for privileged access requests

Conditional Access Transformation

Assess and baseline existing Conditional Access policies and risks

Redesign into a secure simplified and governed CA model