SC PAM Engineer CGEMJP00356827

Role Title: PAM Engineer (Linux Specialist)

Duration: contract to run until 09/02/2027 with potential for extension

Location: Wokingham. Hybrid 2/3 days per week onsite

Rate: up to £625.60 p/d Umbrella inside IR35

Clearance required: Active SC Clearance is essential

Role purpose / summary

Seeking an experienced PAM Engineer (Linux Specialist) to design, implement, support, and optimize Privileged Access Management solutions across a complex enterprise environment. The successful candidate will specialize in securing Windows-based privileged accounts, administrative access, service accounts, and critical infrastructure systems while ensuring compliance with cybersecurity standards and regulatory requirements.

This role combines expertise in Windows Server Administration, Active Directory, Identity & Access Management (IAM), and Cyber Security, with a strong focus on reducing organizational risk through effective privileged access controls.

Key Responsibilities

PAM Administration & Engineering

• Design, implement, and maintain enterprise PAM solutions.
• Onboard privileged accounts, administrative credentials, and service accounts into PAM platforms.
• Configure password vaulting, credential rotation, access request workflows, and session monitoring.
• Administer PAM policies and controls in accordance with security and compliance requirements.
• Perform platform upgrades, patching, and ongoing maintenance activities.

Windows Infrastructure Security

• Integrate PAM solutions with Windows Server environments.
• Secure Domain Administrator, Enterprise Administrator, and Local Administrator accounts.
• Implement just-in-time (JIT) and just-enough administration (JEA) controls where applicable.
• Support privileged access controls across Windows servers, Active Directory, and Microsoft-based platforms.
• Manage privileged session recording and auditing capabilities.

Active Directory & Identity Management

• Integrate PAM solutions with Active Directory and Microsoft Entra ID (Azure AD).
• Support privileged account lifecycle management and governance processes.
• Implement Multi-Factor Authentication (MFA) for privileged access.
• Manage group memberships, elevated permissions, and delegated administrative rights.
• Assist with identity-related security initiatives and access reviews.

Security & Compliance

• Monitor privileged account activity and investigate anomalous access events.
• Support internal and external audits by providing evidence and access reports.
• Ensure compliance with security frameworks and regulatory requirements.
• Partner with Security Operations, Risk, and Compliance teams to address findings and implement remediation actions.
• Maintain detailed documentation of PAM configurations, processes, and standards.

Automation & Process Improvement

• Develop automation solutions using PowerShell and other scripting tools.
• Streamline account onboarding, password management, and reporting processes.
• Contribute to PAM roadmap initiatives and continuous service improvements.
• Identify opportunities to increase security while reducing manual administration overhead.

Operational Support

• Provide Level 2 and Level 3 support for PAM-related incidents and requests.
• Participate in maintenance windows and on-call support activities when required.
• Collaborate with Infrastructure, Security, Cloud, and Application teams on access management projects.
• Act as a subject matter expert for privileged access security controls.

All profiles will be reviewed against the required skills and experience. Due to the high number of applications we will only be able to respond to successful applicants in the first instance. We thank you for your interest and the time taken to apply!

If you receive suspicious outreach claiming to be from us, please contact us via the ManpowerGroup website.

JBRP1_UKTJ