PAM Engineer (Windows Specialist)

Salary: £60,000 - 90,000 per year

Requirements:

• Strong experience implementing and supporting Privileged Access Management (PAM) solutions.
• Expertise in Windows Server Administration.
• Expertise in Active Directory.
• Expertise in Microsoft Entra ID (Azure AD).
• Expertise in Identity & Access Management (IAM).
• Experience securing privileged and administrative accounts.
• Knowledge of MFA, privileged session management, and access governance.
• Strong PowerShell scripting and automation skills.
• Experience supporting security audits and compliance requirements.
• Excellent troubleshooting, stakeholder management, and documentation skills.
• Experience with enterprise PAM platforms such as CyberArk, BeyondTrust, Delinea, or similar is desirable.
• Knowledge of Zero Trust and Privileged Access strategies is desirable.
• Experience working in highly regulated or security-sensitive environments is desirable.
• Active SC Clearance is required.

Responsibilities:

• Design, implement, and maintain enterprise PAM solutions.
• Onboard privileged, administrative, and service accounts into PAM platforms.
• Configure password vaulting, credential rotation, session monitoring, and access workflows.
• Perform platform upgrades, patching, and ongoing maintenance.
• Develop and enforce PAM policies and security controls.
• Integrate PAM solutions with Windows Server environments.
• Secure Domain Admin, Enterprise Admin, and Local Admin accounts.
• Implement Just-In-Time (JIT) and Just-Enough Administration (JEA) controls.
• Integrate PAM with Active Directory and Microsoft Entra ID.
• Support privileged account lifecycle management and governance.
• Monitor privileged account activity and investigate security events.
• Support internal and external audits through reporting and evidence collection.
• Work with Security, Risk, and Compliance teams to address findings and remediation actions.
• Maintain documentation, standards, and operational procedures.
• Develop automation using PowerShell and other scripting tools.
• Improve onboarding, password management, and reporting processes.
• Provide Level 2/3 support for PAM-related incidents and service requests.
• Collaborate with Infrastructure, Security, Cloud, and Application teams on access management initiatives.

Technologies:

• Active Directory
• Azure
• Cloud
• IAM
• Support
• PowerShell
• Security
• Windows
• DevOps

More:

We are seeking an experienced PAM Engineer (Windows Specialist) to join a security-focused team responsible for securing privileged access across a complex enterprise environment. This is an initial 3-month contract role based in Wokingham with a hybrid working arrangement of 50% onsite and 50% remote. The position offers a rate of £600.00 - £625.00 per day inside IR35. You will be part of a team focused on improving security posture, reducing risk, and strengthening compliance through privileged access management. We are looking for a technically strong security professional with a proactive approach to identity security and privileged access management.

last updated 39 week of 2026