Key Details

Role: PAM Specialist Location: Culham - typically 2-3 days per week on site Duration: Until 30/09/2026, with possible extension IR35: In scope Rate: Up to £50-55/hour Environment: Cyber / Public Sector, security-focused

What you would be doing

Implementing and managing PAM toolkits end-to-end Configuring and managing Privileged Remote Access Designing and operating credential vaulting, password rotation, and check-in/check-out workflows Setting up and optimising privileged session recording and monitoring Driving service account discovery and lifecycle management Onboarding Windows Server, Linux/Unix and network devices onto PAM platforms Managing privileged accounts in Active Directory Integrating PAM with SIEM for logging, alerting and monitoring Producing clear documentation, runbooks and technical configuration records Troubleshooting connector and session-related issues

What the client is looking for

Proven, hands-on experience with PAM solutions (implementation and BAU management) Solid knowledge of credential vaulting, password rotation and session monitoring/recording Experience integrating PAM into complex infrastructures (servers, network devices, AD, SIEM) Familiarity with security frameworks such as ISO 27001 and NIST CSF Strong troubleshooting skills and a methodical, security-focused mindset Ability to obtain SC-level national security clearance (BPSS as a minimum)

Nice to have (but not essential)

Experience with BeyondTrust (Password Safe, Privileged Remote Access, Endpoint Privilege Management) Exposure to other PAM platforms such as CyberArk or Delinea Scripting skills (e.g. PowerShell, Python) for automation Experience with privileged access for databases (SQL Server, Oracle) Background in public sector, critical national infrastructure or OT/ICS environments

Why this might interest you

Long-term stability (contract to late 2026 with extension potential) Opportunity to be the go-to PAM specialist in a security-critical setting Hands-on, technically challenging role with real influence on cyber resilience

If this aligns with your experience, I would be keen to share more