Privileged Access Management SME

• Act as the technical authority for Privileged Access Management solutions and associated platform technologies.
• Lead the design, implementation, and integration of PAM solutions across on-premise, hybrid, and cloud environments.
• Capture, analyse, and translate complex business and technical requirements into secure PAM architectures and solutions.
• Develop high-level and low-level technical designs aligned with security-by-design principles.
• Own technical delivery activities, including planning, estimation, implementation, testing, and reporting.
• Design and implement privileged access models across complex enterprise environments.
• Integrate PAM platforms with enterprise services, applications, and infrastructure components.
• Develop automation capabilities for account onboarding, offboarding, credential rotation, and access workflows.
• Provide technical leadership, mentoring, and knowledge transfer to engineering teams.
• Support security accreditation activities and ensure compliance with relevant cyber security standards and controls.
• Engage with stakeholders to present technical solutions, provide recommendations, and justify design decisions.

Technologies:

• API
• AWS
• Active Directory
• Ansible
• Azure
• Bash
• CI/CD
• Cloud
• DevSecOps
• Docker
• Hyper-V
• IAM
• Support
• Kubernetes
• Linux
• PowerShell
• Python
• Security
• TCP/IP
• Terraform
• VMware
• Windows
• DevOps

• Current UK Developed Vetting (DV) clearance is mandatory and must be active prior to commencement.
• Extensive experience delivering enterprise-scale Privileged Access Management (PAM) solutions.
• Strong hands-on experience with PAM platforms, including CyberArk or equivalent solutions.
• Expertise in secure credential storage, password rotation, session management, and privileged access control models.
• Experience integrating PAM solutions into enterprise platforms and services.
• Strong knowledge of Windows and Linux operating systems.
• Experience with virtualisation technologies including VMware and Hyper-V.
• Solid understanding of networking concepts, including TCP/IP, DNS, DHCP, and firewalls.
• Strong automation and scripting capabilities using PowerShell, Bash, Python, Ansible, and Terraform.
• Knowledge of cyber security controls, governance, and accreditation requirements.
• Experience working across the full systems engineering lifecycle.
• Proven experience delivering solutions within highly controlled and secure environments, including air-gapped, government, or defence environments.
• Strong analytical, problem-solving, and stakeholder management skills.
• Experience with cloud platforms including AWS and Azure is desirable.
• Infrastructure as Code (IaC) implementation experience is desirable.
• Experience integrating with enterprise services such as Active Directory, PKI, monitoring platforms, and SIEM solutions is desirable.
• Experience with DevSecOps tooling and CI/CD pipelines is desirable.
• API-driven automation of privileged account lifecycle management is desirable.
• Integration of PAM platforms with SIEM/SOC tooling for monitoring and audit is desirable.
• Experience with containerisation technologies including Docker and Kubernetes is desirable.
• Knowledge of enterprise Identity and Access Management (IAM) solutions is desirable.

We are offering an initial 6-month contract for a DV Cleared Privileged Access Management (PAM) SME in Yeovil, UK, inside IR35 at £90-£95 per hour. The working pattern is a minimum of 3-4 days per week on site, with a preference for full-time on-site presence, and extended working hours can be accommodated to reduce the number of days required on site. We are seeking a hands-on technical specialist to help design, implement, integrate, and enhance secure privileged access solutions in highly secure and regulated environments.