IAM Engineer

We are seeking an experienced Senior Privileged Identity Management (PIM) & Privileged Access Management (PAM) Engineer to design, implement, and support enterprise-class privileged access and identity security solutions. The successful candidate will play a key role in strengthening the organisation’s Zero Trust security framework by securing privileged accounts, administrative access, service accounts, and critical infrastructure across on-premises, cloud, and hybrid environments.

The ideal candidate will have strong expertise in Microsoft Entra ID PIM, CyberArk, BeyondTrust, Delinea, Azure, AWS, and Identity & Access Management (IAM) technologies, with proven experience delivering PAM transformation and governance initiatives within large enterprise environments.

Technical Skills

Microsoft Security Technologies

• Microsoft Entra ID
• Entra ID Privileged Identity Management (PIM)
• Conditional Access
• Azure RBAC
• Azure Management Groups
• Microsoft Defender Suite
• Microsoft Sentinel

PAM Technologies

Experience with one or more of:

• CyberArk PAS
• CyberArk Privilege Cloud
• BeyondTrust PAM
• Delinea (Thycotic)
• ARCON PAM
• One Identity Safeguard
• HashiCorp Vault

Cloud Platforms

Microsoft Azure

• Azure Security
• Azure Identity Services
• Azure Key Vault
• Azure RBAC
• Azure Policy

AWS

• AWS IAM
• AWS Organizations
• AWS Security Hub
• AWS IAM Identity Center
• AWS KMS

Scripting & Automation

• PowerShell
• Python
• REST APIs
• ARM Templates
• Terraform

Identity & Governance

• Active Directory
• LDAP
• Identity Governance
• Access Certification
• Segregation of Duties (SoD)
• Joiner-Mover-Leaver Processes

Security Domain Knowledge

• Privileged Access Management (PAM)
• Identity Governance & Administration (IGA)
• Zero Trust Architecture
• RBAC & ABAC
• Identity Security
• Authentication & Authorisation
• Security Operations
• Risk & Compliance
• Access Governance

Preferred Certifications

• CyberArk Defender Certification
• CyberArk Sentry Certification
• Microsoft Certified: Identity and Access Administrator Associate (SC-300)
• Microsoft Certified: Cybersecurity Architect Expert (SC-100)
• CISSP
• CISM
• Certified PAM Professional (CPP)
• AWS Security Specialty