> Markdown version of [/jobs/ext/3167033-iam-pam-delivery-consultant](https://www.wearedevelopers.com/jobs/ext/3167033-iam-pam-delivery-consultant). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# IAM/PAM Delivery Consultant

- **Company:** Netbuilder
- **Location:** London, UK
- **Contract:** Temporary contract
- **Skills:** Active Directory, Configuration Management Databases, Identity and Access Management, Role-Based Access Control, Cyberark, SailPoint
- **Published:** September 11, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=903c9794573a9e32

## About the Role

* Proven hands-on delivery experience across IAM/PAM platforms and processes - SailPoint (or equivalent IGA tooling), a PAM/vaulting solution (e.g. CyberArk, HiPAM or similar), and Active Directory at scale.
 * Solid grasp of privileged account governance, entitlement/RBAC and segregation-of-duties concepts, and identity lifecycle (joiner/mover/leaver) controls.
 * Experience delivering into regulated, audit-scrutinised environments - financial services strongly preferred - including producing evidence that satisfies IT Risk and GRC functions.
 * Comfortable working to fixed milestones and acceptance criteria rather than open-ended hours, with the discipline to document decisions, owners and evidence as you go.
 * Strong stakeholder management: confident running workshops and reconciling requirements across governance, operations and platform teams, and able to work with distributed teams where necessary.
 * Clear, structured written communication - you'll be producing registers, control maps and board-ready assurance reports, not just working the tooling.

## Description

We're recruiting an experienced IAM/PAM Delivery Consultant to join the team delivering a major Identity and Privileged Access Management uplift programme for a Tier 1 financial services client. This is high-risk, high-visibility remediation work: reconciling privileged accounts across Active Directory, SailPoint and HiPAM, closing entitlement and lifecycle gaps, assuring privileged access controls, and standing up the metrics that prove the controls actually work - all against a fixed set of milestones, acceptance criteria and evidenced deliverables.

You'll work directly alongside the client's IAM Governance, UAM Operations and Platform teams, reporting into a structured governance cadence (weekly working group, fortnightly design/control/risk review, monthly steering committee), and producing evidence packs that satisfy IT Risk and GRC scrutiny.

WHAT YOU'LL DELIVER

 * Build a single, reconciled view of the privileged and high-value account population across Active Directory, SailPoint and HiPAM - with an approve/remove/remediate decision against every account and a named owner.
 * Confirm SailPoint's application and entitlement coverage against the CMDB application list, starting with the UK before extending the method to other client regions.
 * Trace joiner, mover and leaver processes end to end, identify where legacy automation has silently broken, and put interim controls and escalation routes in place.
 * Review a risk-based sample of privileged access logs - checkout, break-glass and session activity - against the client's own PAM Standard, and recommend a risk-based approach to ongoing monitoring.
 * Triage high-risk, low-effort findings into quick fixes, interim controls or longer-term design items, and execute the quick fixes directly.
 * Define and baseline the programme's core Phase 1 metrics: definition, data source, owner, frequency, threshold and escalation route for each.
 * Produce clean, evidenced documentation including but not limited to - registers, RACI, metrics baseline and a sequenced ongoing roadmap.