Lead PAM Engineer

Salary: £33,000 - 65,000 per year

Requirements:

• We have proven experience implementing and managing Idira (CyberArk); other PAM experience is beneficial.
• We have a strong understanding of Privileged Access Management and security principles.
• We have strong understanding of Azure and AWS platforms in large-scale enterprise environments, including core infrastructure, networking, compute and identity.
• We have solid understanding of cloud networking concepts and can troubleshoot and resolve cloud connectivity issues, including querying firewall logs, debugging NSG/Security Group rules and validating DNS resolution.
• We understand enterprise identity and access management within Azure and AWS, including Entra ID and IAM Identity Centre, and have a solid understanding of RBAC in both.
• We have experience deploying, configuring and managing cloud infrastructure across Azure and AWS using Infrastructure as Code, particularly Terraform.
• We are familiar with testing and validation of IaC using tools such as Terraform Test and automated quality checks within CI/CD pipelines.
• We have experience developing and maintaining GitHub Actions workflows to automate infrastructure provisioning, testing and operational tasks.
• We are proficient in scripting with Python and PowerShell for automation and can integrate them securely within automation workflows.
• We have experience consuming REST APIs, including authentication, API requests, pagination, error handling and response processing.
• We have excellent troubleshooting and analytical skills.
• We have strong verbal and written communication skills.
• Familiarity with hybrid identity environments and cloud-based identity solutions is preferred.
• Knowledge of regulatory security requirements and best practices is preferred.
• Experience working with cloud-based technology, subscriptions, infrastructure as a service and cloud platform configuration is preferred.
• Previous experience working with CyberArk APIs is preferred.

Responsibilities:

• We review the security posture, configuration, hygiene and operational maturity of the current PAM deployment.
• We work on future MVPs for the PAM environment.
• We develop, document and implement identity solutions using Idira (CyberArk) tools.
• We proactively lead end-to-end execution of technical and handover activities related to our PAM project.
• We advise on and update the day-to-day operations of Idira tools to ensure optimal performance, security and compliance.
• We ensure identity solutions meet security and compliance standards by implementing and enforcing security policies and procedures.
• We create and maintain comprehensive documentation of configurations, processes and best practices.
• We work closely with cross-functional teams, including IT, security and business units, to achieve project goals and deliverables.
• We communicate clearly with senior stakeholders and technical teams.
• We drive technical innovation and excellence within the identity management environment by evaluating and recommending tools and technologies.
• We define operational processes and work with operational handover teams to deploy changes into production in a fully supported manner.

Technologies:

• API
• AWS
• Azure
• CI/CD
• Cloud
• Firewall
• GitHub
• IAM
• PowerShell
• Python
• REST
• RBAC
• Security
• Terraform
• DevOps

More:

We are working with a client that has already implemented SIA, SCA, PCloud and Conjur across its environment, with further expansion planned. This is a 12-month inside IR35 contract offering a day rate of up to £760, with hybrid working available across Havant, Reading and Glasgow.

last updated 32 week of 2026