IAM/PAM Delivery Consultant

We’re recruiting an experienced IAM/PAM Delivery Consultant to join the team delivering a major Identity and Privileged Access Management uplift programme for a Tier 1 financial services client. This is high-risk, high-visibility remediation work: reconciling privileged accounts across Active Directory, SailPoint and HiPAM, closing entitlement and lifecycle gaps, assuring privileged access controls, and standing up the metrics that prove the controls actually work - all against a fixed set of milestones, acceptance criteria and evidenced deliverables.

You’ll work directly alongside the client’s IAM Governance, UAM Operations and Platform teams, reporting into a structured governance cadence (weekly working group, fortnightly design/control/risk review, monthly steering committee), and producing evidence packs that satisfy IT Risk and GRC scrutiny.

WHAT YOU’LL DELIVER

• Build a single, reconciled view of the privileged and high-value account population across Active Directory, SailPoint and HiPAM - with an approve/remove/remediate decision against every account and a named owner.
• Confirm SailPoint’s application and entitlement coverage against the CMDB application list, starting with the UK before extending the method to other client regions.
• Trace joiner, mover and leaver processes end to end, identify where legacy automation has silently broken, and put interim controls and escalation routes in place.
• Review a risk-based sample of privileged access logs - checkout, break-glass and session activity - against the client’s own PAM Standard, and recommend a risk-based approach to ongoing monitoring.
• Triage high-risk, low-effort findings into quick fixes, interim controls or longer-term design items, and execute the quick fixes directly.
• Define and baseline the programme’s core Phase 1 metrics: definition, data source, owner, frequency, threshold and escalation route for each.
• Produce clean, evidenced documentation including but not limited to - registers, RACI, metrics baseline and a sequenced ongoing roadmap.

• Proven hands-on delivery experience across IAM/PAM platforms and processes - SailPoint (or equivalent IGA tooling), a PAM/vaulting solution (e.g. CyberArk, HiPAM or similar), and Active Directory at scale.
• Solid grasp of privileged account governance, entitlement/RBAC and segregation-of-duties concepts, and identity lifecycle (joiner/mover/leaver) controls.
• Experience delivering into regulated, audit-scrutinised environments - financial services strongly preferred - including producing evidence that satisfies IT Risk and GRC functions.
• Comfortable working to fixed milestones and acceptance criteria rather than open-ended hours, with the discipline to document decisions, owners and evidence as you go.
• Strong stakeholder management: confident running workshops and reconciling requirements across governance, operations and platform teams, and able to work with distributed teams where necessary.
• Clear, structured written communication - you’ll be producing registers, control maps and board-ready assurance reports, not just working the tooling.

Work on a milestone-based programme with a defined start, clear acceptance criteria and evidenced outcomes - not an open-ended bench assignment.

Grown-up support:

Full backing from NETbuilder’s consulting practice, plus continuous professional development and recognised certifications as you progress.

Culture that means something:

Energy, Empathy and Enjoyment aren’t a poster on the wall - they shape how our teams work with each other and with clients, every day.

Sector depth:

Since 1999, NETbuilder has built specialist delivery capability across financial services, government and commercial markets - you’ll be surrounded by people who’ve done this before.

Work authorisation:

• United Kingdom (required)

NETbuilder has been delivering digital, software and consulting excellence to financial services, government and commercial clients since 1999. We back a world-class team of consultants with the training, tooling and mentoring to do their best work - and we deliver differently: fixed price, fixed term, against a fixed, evidenced outcome per milestone, not open-ended hours. Our culture runs on three things - Energy, Empathy and Enjoyment - and we’re looking for our next IAM/PAM specialist to bring all three to a high-profile identity security programme.