Senior PAM & IAM Architect (AI Identities)

OneAdvanced Limited; Birmingham; Hybrid; GBP 70,000 - 110,000; Full time

Benefits offered by this job

Wellbeing focused

Annual leave 20 days + holidays

Employee Assistance Programme

Development Programmes

Online Learning Platform SkillsHub!

Life Insurance

Personal Accident Insurance

Performance Bonus

Job summary

OneAdvanced Limited in Birmingham, England, seeks an experienced IAM/PAM professional to lead the design, build and deployment of a next-generation Privileged Access Management capability. You will work with CTO stakeholders to select tools, define processes, and extend controls to AI identities, while expanding governance across IAM operations.

The role covers identity governance, policy development, and risk management, with opportunities to mentor teams and influence security strategy across

Qualifications

• Minimum 6+ years of hands-on experience in Identity and Access Management with PAM as core
• Deep PAM experience including vault administration, credential rotation and session management
• Experience building out a PAM capability (tool selection, deployment and process design) is highly advantageous
• Bachelor’s degree in computer science, Information Technology, or related field
• Relevant certifications in Windows (Azure, Active Directory) and/or AWS desirable

Responsibilities

• Design, build out, and deploy our next-generation PAM capability from tool selection through to production rollout
• Partner with CTO stakeholders to implement PAM tool and supporting processes, standards, and controls
• Extend privileged access controls to non-human and agentic AI identities, securing credentials and just-in-time access
• Automate core PAM operations, including credential rotation, session monitoring, and vault hygiene
• Grow into subject-matter expert for PAM and advise teams on policy and standards
• Implement and manage IAM systems across platforms such as Active Directory, LDAP, and Entra
• Manage user accounts, groups, and permissions; grant/deny access based on role
• Configure and enforce access policies; monitor IAM activity and investigate anomalies
• Provide IAM tooling guidance and project administration; integrate IAM into IT infrastructure
• Support non-human identities lifecycle including authentication, authorization, monitoring, de-provisioning
• Assist audits with IAM risk and control activities and evidence gathering
• Document IAM processes and procedures
• Run access certification campaigns and manage joiner/m mover/leaver workflows
• Develop and report IAM, PAM, and IGA KPIs; deliver training to staff
• Track IAM tooling developments and propose options to leadership
• Support identity-related projects with the Director of IAM

Skills

PAM experience

IAM concepts

Scripting skills

Independent worker

Education

Bachelor's degree in computer science or related field

Certifications: Windows Azure / Active Directory / AWS

Tools

CyberArk

SailPoint

Okta

Ping Identity

PowerShell

Python

Ruby

Active Directory

Entra

LDAP

SQL Server

Azure

Windows

Unix/Linux

Job description

OneAdvanced Limited in Birmingham, England, seeks an experienced IAM/PAM professional to lead the design, build and deployment of a next-generation Privileged Access Management capability. You will work with CTO stakeholders to select tools, define processes, and extend controls to AI identities, while expanding governance across IAM operations.

The role covers identity governance, policy development, and risk management, with opportunities to mentor teams and influence security strategy across