Privileged Access Management (PAM) Consultant

Description

Job Title: Privileged Access Management (PAM) Consultant

Location: UK

Job Type: Contract

Experience Level: Senior

Role Overview:

We are seeking a highly experienced Privileged Access Management (PAM) Consultant to lead the assessment and strategic planning of PAM solutions within a complex hosting infrastructure. This role focuses on evaluating existing access control mechanisms, identifying risks associated with over-privileged accounts, and recommending scalable PAM solutions tailored to diverse operating systems and on-premises environments.

Key Responsibilities:

Conduct comprehensive assessments of internal infrastructure to identify privileged access risks and gaps.

Analyze current access provisioning models, especially where elevated permissions (eg, root, Admin access) are broadly granted.

Analyze existing access control models and recommend enhancements using RBAC, ABAC, and least privilege principles.

Design PAM architectures that support secure delegation of access across diverse platforms.

Design and recommend PAM strategies that enforce least privilege, improve auditability, and enhance operational security.

Evaluate and compare PAM solutions (eg, CyberArk, BeyondTrust, Delinea) based on technical fit, scalability, and integration capabilities.

Document findings in detailed reports including architecture diagrams, risk assessments, and implementation roadmaps.

Collaborate with infrastructure, security, and operations teams to align PAM strategies with business and technical requirements.

Support PoC and pilot deployments to validate solution effectiveness.

Provide technical guidance on session monitoring, credential vaulting, access workflows, and policy enforcement.

Key Skills & Experience:

10+ years of experience in PAM consulting and implementation, with a strong focus on environmental assessment and solution design.

Strong expertise in RBAC and ABAC models, including policy design and enforcement.

Deep understanding of on-premises infrastructure and hosting environments.

Hands-on experience with Windows, Linux, Solaris, and AIX server platforms.

Familiarity with Active Directory, LDAP, SSH key management, and service account governance.

Experience with PAM tools such as CyberArk, BeyondTrust, Delinea, etc

Experience with identity federation, directory services, and authentication protocols (eg, Kerberos, SAML, OAuth)

Strong analytical skills to assess complex environments and recommend tailored solutions.

Excellent documentation and presentation skills for technical and executive audiences.

Preferred Qualifications:

Certifications in PAM technologies (eg, CyberArk Defender/Sentry, BeyondTrust Certified).

Experience with Scripting (PowerShell, Bash, Python) for automation and discovery.

Knowledge of compliance frameworks such as ISO 27001, SOC 2, PCI-DSS, or NIST.

SC is desired, can be lapsed SC or must be eligible for SC

Skills

• Privileged Access Management
• PAM
• Security
• design
• implementation
• environmental assessment
• solutions design

This is a hybrid role, you will be required to work onsite for 2-3 days a week.

Job Title: Privileged Access Management (PAM) Consultant

Location: Telford, UK

Job Type: Contract

Trading as TEKsystems. Allegis Group Limited, Bracknell, RG12 1RT, United Kingdom. No Allegis Group Limited operates as an Employment Business and Employment Agency as set out in the Conduct of Employment Agencies and Employment Businesses Regulations 2003. TEKsystems is a company within the Allegis Group network of companies (collectively referred to as "Allegis Group"). Aerotek, Aston Carter, EASi, Talentis Solutions, TEKsystems, Stamford Consultants and The Stamford Group are Allegis Group brands. If you apply, your personal data will be processed as described in the Allegis Group Online Privacy Notice available at our website.

To access our Online Privacy Notice, which explains what information we may collect, use, share, and store about you, and describes your rights and choices about this, please go our website.

We are part of a global network of companies and as a result, the personal data you provide will be shared within Allegis Group and transferred and processed outside the UK, Switzerland and European Economic Area subject to the protections described in the Allegis Group Online Privacy Notice. We store personal data in the UK, EEA, Switzerland and the USA. If you would like to exercise your privacy rights, please visit the "Contacting Us" section of our Online Privacy Notice on our website for details on how to contact us. To protect your privacy and security, we may take steps to verify your identity, such as a password and user ID if there is an account associated with your request, or identifying information such as your address or date of birth, before proceeding with your request. commitments under the UK Data Protection Act, EU-U.S. Privacy Shield or the Swiss-U.S. Privacy Shield.