Lead Privileged Access Management (PAM) Engineer

Lead Privileged Access Management (PAM) Engineer - 12 months contract - Inside IR35 - Hybrid - Reading/Portsmouth/Glasgow Office

We are looking for an experienced Lead Privileged Access Management (PAM) Engineer to join a large-scale cloud and identity transformation programme. This is an exciting opportunity to play a key role in enhancing and securing an enterprise-wide PAM environment while driving improvements in automation, governance, and operational maturity.

Key Responsibilities

Good Cloud engineering skills.
Lead the implementation, administration, and enhancement of CyberArk (Idira) PAM solutions.
Assess and improve PAM security posture, platform hygiene, and operational effectiveness.
Strengthen controls around privileged account onboarding, credential rotation, session monitoring, secrets management, and access governance.
Design, document, and deliver secure identity and access management solutions.

Required Skills & Experience
Strong hands-on experience with CyberArk/Idira PAM implementation and administration.
Deep understanding of Privileged Access Management (PAM) principles and security best practices.
Experience with Azure, AWS, Entra ID, IAM Identity Centre, and RBAC.
Infrastructure as Code experience using Terraform.
Strong scripting skills in Python and PowerShell.
Experience with GitHub Actions, CI/CD pipelines, and REST APIs.

Guidant, Carbon60, Lorien & SRG - The Impellam Group Portfolio are acting as an Employment Business in relation to this vacancy.