Senior PAM/PIM Engineer - CyberArk, Entra ID PIM, Azure, AWS

Project overview

Senior Privileged Access Management (PAM)/Privileged Identity Management (PIM) Engineer Contract

AxiaMetrics is recruiting a Senior PAM/PIM Engineer for an enterprise client. You will design, implement and support privileged access and identity security across on-premises, cloud and hybrid environments, as part of the client's Zero Trust programme.

Project details

• Start: flexible
• Duration: 6 months
• Remote: hybrid
• Location: West Midlands, United Kingdom, GB

KEY SKILLS

• Microsoft Entra ID PIM: JIT/JEA access, approval workflows, access reviews, role governance
• Enterprise PAM tooling: CyberArk PAS/Privilege Cloud, BeyondTrust, Delinea (Thycotic), ARCON, One Identity Safeguard or HashiCorp Vault
• Azure (RBAC, Management Groups, Key Vault, Policy, Conditional Access) and AWS (IAM, Organizations, IAM Identity Center, KMS, Security Hub)
• PowerShell, Python, REST APIs, Terraform/ARM templates

THE ROLE

• Design, implement and administer enterprise PAM solutions
• Secure privileged, shared and service accounts and application credentials, using vaulting, password rotation and session management
• Configure privileged session monitoring, recording and auditing
• Onboard infrastructure, applications, databases and cloud platforms into PAM
• Implement and manage Entra ID PIM, plus RBAC and ABAC frameworks
• Secure privileged access across Azure subscriptions, Entra ID roles, AWS IAM roles and AWS Organizations
• Integrate PAM with Entra ID, Active Directory, LDAP, SailPoint, Saviynt, Okta, Ping Identity and ServiceNow
• Support SSO, MFA and identity federation initiatives
• Lead privileged account reviews, access certification and audit and compliance activity
• Investigate privileged access incidents and build compliance reporting and dashboards
• Automate onboarding, account discovery, password management and reporting, and support IaC and DevSecOps requirements

REQUIRED EXPERIENCE

DESIRABLE CERTIFICATIONS CyberArk Defender/Sentry, SC-300, SC-100, AZ-500, AWS Security Specialty, CISSP, CISM, CPP

2 days remote

• 5-10+ years in Identity & Access Management or Cyber Security
• 3-5+ years hands-on implementing and supporting PAM solutions
• Experience in large, regulated enterprise environments
• Strong knowledge of IGA, Zero Trust, least privilege, SoD and Joiner-Mover-Leaver processes
• Microsoft security stack exposure (Defender, Sentinel) is an advantage
• Strong troubleshooting and operational support skills