IAM Security Engineer
hace 2 días
Coventry
• Role activation approval workflows We are seeking an experienced Senior Privileged Identity Management (PIM) & Privileged Access Management (PAM) Engineer to design, implement, and support enterprise-class privileged access and identity security solutions. The successful candidate will play a key role in strengthening the organisation’s Zero Trust security framework by securing privileged accounts, administrative access, service accounts, and critical infrastructure across on-premises, cloud, and hybrid environments. The ideal candidate will have strong expertise in Microsoft Entra ID PIM, CyberArk, BeyondTrust, Delinea, Azure, AWS, and Identity & Access Management (IAM) technologies, with proven experience delivering PAM transformation and governance initiatives within large enterprise environments. • Design, implement, and administer enterprise PAM solutions., • Secure privileged accounts, shared accounts, service accounts, and application credentials., • Implement credential vaulting, password rotation, and session management controls., • Configure privileged session monitoring, recording, and auditing capabilities., • Develop and maintain PAM operational procedures and standards., • Support PAM onboarding activities across infrastructure, applications, databases, and cloud platforms., • Implement and manage Microsoft Entra ID Privileged Identity Management (PIM)., • Configure:, • Just-in-Time (JIT) access, • Just-Enough Access (JEA), • Role activation approval workflows, • Time-bound privileged access, • Access reviews, • Privileged role governance, • Implement Role-Based Access Control (RBAC) and Attribute-Based Access Control (ABAC) frameworks., • Support identity lifecycle management and privileged access certification processes., • Secure privileged access across Microsoft Azure and AWS environments., • Implement privileged access controls for:, • Azure subscriptions, • Azure Management Groups, • Microsoft Entra ID roles, • AWS IAM roles, • AWS Organizations, • AWS privileged accounts, • Integrate PAM controls within cloud-native and hybrid architectures., • Support cloud security and Zero Trust initiatives., • Integrate PAM solutions with:, • Microsoft Entra ID, • Active Directory, • LDAP, • SailPoint, • Saviynt, • ServiceNow, • Okta, • Ping Identity, • Support Single Sign-On (SSO), Multi-Factor Authentication (MFA), and identity federation initiatives., • Work closely with IAM and IGA teams on privileged access governance., • Support audit and compliance activities related to privileged access controls., • Perform privileged account reviews and access certification exercises., • Investigate privileged access incidents and security events., • Develop reporting and dashboards for privileged access metrics and compliance monitoring., • Ensure alignment with Zero Trust and least-privilege security principles., • Develop automation scripts for PAM provisioning and administration., • Automate onboarding, password management, account discovery, and reporting processes., • Integrate PAM solutions with ITSM and workflow platforms., • Support Infrastructure as Code (IaC) and DevSecOps privileged access requirements., • 5-10+ years of experience in Identity & Access Management or Cyber Security., • 3-5+ years of hands‑on experience implementing and supporting PAM solutions., • Experience working in enterprise‑scale environments with regulatory and compliance requirements., • Strong troubleshooting and operational support experience., • Microsoft Entra ID, • Entra ID Privileged Identity Management (PIM), • Conditional Access, • Azure RBAC, • Azure Management Groups, • Microsoft Defender Suite, • Microsoft Sentinel, • CyberArk PAS, • CyberArk Privilege Cloud, • BeyondTrust PAM, • Delinea (Thycotic), • ARCON PAM, • One Identity Safeguard, • HashiCorp Vault, • Azure Security, • Azure Identity Services, • Azure Key Vault, • Azure RBAC, • Azure Policy, • AWS IAM, • AWS Organizations, • AWS Security Hub, • AWS IAM Identity Center, • AWS KMS, • PowerShell, • Python, • REST APIs, • ARM Templates, • Terraform, • Active Directory, • LDAP, • Identity Governance, • Access Certification, • Segregation of Duties (SoD), • Joiner-Mover-Leaver Processes, • Privileged Access Management (PAM), • Identity Governance & Administration (IGA), • Zero Trust Architecture, • RBAC & ABAC, • Identity Security, • Authentication & Authorisation, • Security Operations, • Risk & Compliance, • Access Governance, • CyberArk Defender Certification, • CyberArk Sentry Certification, • Microsoft Certified: Identity and Access Administrator Associate (SC-300), • Microsoft Certified: Cybersecurity Architect Expert (SC-100), • CISSP, • CISM, • Certified PAM Professional (CPP), • AWS Security Specialty, • Azure Security Engineer Associate (AZ-500) #J-18808-Ljbffr