PAM Specialist

Role: PAM Specialist

Ref: 5919(JM)

IR35: In Scope

Pay Rate: £20.32 per hour PAYE, paid holiday and pension contributions

Length of Contract: 8 weeks, may be extended

Location: Culham - hybrid working

Security Clearance: BPSS basic

Role Overview

We are recruiting on behalf of our client for this role. The PAM Specialist will be responsible for the hands on implementation, configuration, and ongoing management of a BeyondTrust Privileged Access Management platform. Working within the cyber security team, you will deploy and configure Password Safe, Privileged Remote Access, and related BeyondTrust components to secure privileged access across the enterprise.

This is a technically focused implementation role requiring deep expertise in BeyondTrust products and privileged access management. You will work closely with infrastructure teams, application owners, and security operations to ensure privileged accounts are properly vaulted, sessions are monitored, and access adheres to least privilege principles.

Key Accountabilities

• Implement and configure BeyondTrust Password Safe for credential vaulting and management
• Deploy and manage BeyondTrust Privileged Remote Access for secure vendor and administrator access
• Configure automated password rotation policies for privileged and service accounts
• Implement privileged session recording, monitoring, and keystroke logging
• Configure Just in Time (JIT) access workflows and approval processes
• Onboard Windows, Linux/Unix servers, network devices, and applications to the PAM platform
• Discover and vault service accounts, application accounts, and shared credentials
• Configure Smart Rules for automated account discovery and management
• Implement session proxy configurations for RDP, SSH, and application access
• Develop break glass procedures and emergency access workflows
• Integrate the PAM platform with SIEM solutions for security monitoring and alerting
• Configure connectors for Active Directory, Entra ID, and target systems
• Manage platform upgrades, patching, and health monitoring
• Troubleshoot connector issues, session failures, and platform errors
• Maintain documentation for PAM configurations, policies, and operational runbooks
• Support audit and compliance activities, including reporting and evidence gathering

Essential Requirements

• Hands on experience implementing and managing BeyondTrust Password Safe
• Experience configuring and managing BeyondTrust Privileged Remote Access
• Strong understanding of credential vaulting, password rotation, and check in/check out workflows
• Experience implementing privileged session recording and monitoring
• Knowledge of service account discovery and lifecycle management
• Experience onboarding Windows Server, Linux/Unix, and network devices to PAM platforms
• Strong understanding of Active Directory privileged account management
• Experience integrating PAM solutions with SIEM platforms
• Working knowledge of security frameworks such as ISO 27001 and NIST CSF
• Strong troubleshooting skills for PAM connectors and session related issuesAbility to produce clear technical documentation and operational runbooks
• Ability to obtain SC level national security clearance

Desirable Requirements

• Degree in Information Security, Computer Science, or a related STEM discipline
• BeyondTrust certifications (e.g. Password Safe Administrator, Privileged Remote Access)
• Experience with BeyondTrust Endpoint Privilege Management
• Experience with other PAM platforms such as CyberArk or Delinea
• Scripting or automation skills (PowerShell, Python)
• Experience managing database privileged access (SQL Server, Oracle)
• Familiarity with ITSM processes and formal change control
• Experience working in public sector or critical national infrastructure environments
• Knowledge of OT/ICS environments and industrial system access requirements

How to Apply

• Quote the Job Title and Reference Number in your application.
• Submit your CV in Word format.
• Applications are reviewed on a rolling basis - early submission is recommended.