Privileged Access Management Engineer

Job Title: PAM Specialist Location: Culham, UK Job Type: Full-time contract, Until 30/09/2026, possible extension Work Model: Hybrid (2-3 days/week on site)

Minimum Requirement: Essential: Hands-on experience implementing and managing PAM toolkits Experience with Privileged Remote Access configuration and management Strong understanding of credential vaulting, password rotation, and check-in/check-out workflows Experience configuring privileged session recording and monitoring Knowledge of service account discovery and life cycle management Experience onboarding Windows Server, Linux/Unix, and network devices to PAM platforms Understanding of Active Directory privileged account management Experience with SIEM integration for PAM event logging and alerting Working knowledge of security frameworks: ISO 27001, NIST CSF Strong troubleshooting skills for connector and session issues Good documentation skills for technical configurations and runbooks

Desirable: Degree in Information Security, Computer Science, or related STEM field BeyondTrust certifications (Password Safe Administrator, Privileged Remote Access) Experience with BeyondTrust Endpoint Privilege Management Experience with other PAM platforms (CyberArk, Delinea) Scripting skills (PowerShell, Python) for automation Experience with database privileged access (SQL Server, Client) Familiarity with ITSM workflows and change control procedures Experience in public sector or critical national infrastructure environments Knowledge of OT/ICS environments and industrial systems access requirements

Hands-on experience implementing and managing PAM toolkits Experience with Privileged Remote Access configuration and management Strong understanding of credential vaulting, password rotation, and check-in/check-out workflows Experience configuring privileged session recording and monitoring Knowledge of service account discovery and life cycle management Experience onboarding Windows Server, Linux/Unix, and network devices to PAM platforms Understanding of Active Directory privileged account management Experience with SIEM integration for PAM event logging and alerting Working knowledge of security frameworks: ISO 27001, NIST CSF Strong troubleshooting skills for connector and session issues Good documentation skills for technical configurations and runbooks

Desirable: Degree in Information Security, Computer Science, or related STEM field BeyondTrust certifications (Password Safe Administrator, Privileged Remote Access) Experience with BeyondTrust Endpoint Privilege Management Experience with other PAM platforms (CyberArk, Delinea) Scripting skills (PowerShell, Python) for automation Experience with database privileged access (SQL Server, Client) Familiarity with ITSM workflows and change control procedures Experience in public sector or critical national infrastructure environments Knowledge of OT/ICS environments and industrial systems access requirements