Senior PAM/PIM Engineer - CyberArk, Entra ID PIM, Azure, AWS

Senior Privileged Access Management (PAM)/Privileged Identity Management (PIM) Engineer Contract

AxiaMetrics is recruiting a Senior PAM/PIM Engineer for an enterprise client. You will design, implement and support privileged access and identity security across on-premises, cloud and hybrid environments, as part of the client's Zero Trust programme.

KEY SKILLS - Microsoft Entra ID PIM: JIT/JEA access, approval workflows, access reviews, role governance - Enterprise PAM tooling: CyberArk PAS/Privilege Cloud, BeyondTrust, Delinea (Thycotic), ARCON, One Identity Safeguard or HashiCorp Vault - Azure (RBAC, Management Groups, Key Vault, Policy, Conditional Access) and AWS (IAM, Organizations, IAM Identity Center, KMS, Security Hub) - PowerShell, Python, REST APIs, Terraform/ARM templates

THE ROLE - Design, implement and administer enterprise PAM solutions - Secure privileged, shared and service accounts and application credentials, using vaulting, password rotation and session management - Configure privileged session monitoring, recording and auditing - Onboard infrastructure, applications, databases and cloud platforms into PAM - Implement and manage Entra ID PIM, plus RBAC and ABAC frameworks - Secure privileged access across Azure subscriptions, Entra ID roles, AWS IAM roles and AWS Organizations - Integrate PAM with Entra ID, Active Directory, LDAP, SailPoint, Saviynt, Okta, Ping Identity and ServiceNow - Support SSO, MFA and identity federation initiatives - Lead privileged account reviews, access certification and audit and compliance activity - Investigate privileged access incidents and build compliance reporting and dashboards - Automate onboarding, account discovery, password management and reporting, and support IaC and DevSecOps requirements

REQUIRED EXPERIENCE - 5-10+ years in Identity & Access Management or Cyber Security - 3-5+ years hands-on implementing and supporting PAM solutions - Experience in large, regulated enterprise environments - Strong knowledge of IGA, Zero Trust, least privilege, SoD and Joiner-Mover-Leaver processes - Microsoft security stack exposure (Defender, Sentinel) is an advantage - Strong troubleshooting and operational support skills

DESIRABLE CERTIFICATIONS CyberArk Defender/Sentry, SC-300, SC-100, AZ-500, AWS Security Specialty, CISSP, CISM, CPP

2 days remote