Job Description

Contract: Initial 6-Month Contract
Rate: 90- 95 per hour (Inside IR35)
Location: Yeovil, UK
Working Pattern: Minimum 3-4 days per week on site, with a preference for full-time on-site presence. Extended working hours can be accommodated to reduce the number of days required on site.
Security Clearance: Current UK Developed Vetting (DV) Clearance is mandatory

We are seeking an experienced DV Cleared Privileged Access Management (PAM) Subject Matter Expert (SME) to support the design, implementation, integration, and ongoing enhancement of secure privileged access solutions within highly secure and regulated environments.

This role requires a hands-on technical specialist with deep expertise in PAM technologies, secure platform engineering, and cyber security controls. The successful candidate will play a key role in delivering secure access management capabilities across complex enterprise and mission-critical environments.

• Act as the technical authority for Privileged Access Management solutions and associated platform technologies.

• Lead the design, implementation, and integration of PAM solutions across on-premise, hybrid, and cloud environments.

• Capture, analyse, and translate complex business and technical requirements into secure PAM architectures and solutions.

• Develop high-level and low-level technical designs aligned with security-by-design principles.

• Own technical delivery activities, including planning, estimation, implementation, testing, and reporting.

• Design and implement privileged access models across complex enterprise environments.

• Integrate PAM platforms with enterprise services, applications, and infrastructure components.

• Develop automation capabilities for account onboarding, offboarding, credential rotation, and access workflows.

• Provide technical leadership, mentoring, and knowledge transfer to engineering teams.

• Support security accreditation activities and ensure compliance with relevant cyber security standards and controls.

• Engage with stakeholders to present technical solutions, provide recommendations, and justify design decisions.

• Current UK Developed Vetting (DV) Clearance - mandatory.

• Extensive experience delivering enterprise-scale Privileged Access Management solutions.

• Strong hands-on experience with PAM platforms, including CyberArk or equivalent solutions.

• Expertise in secure credential storage, password rotation, session management, and privileged access control models.

• Experience integrating PAM solutions into enterprise platforms and services.

• Strong knowledge of Windows and Linux operating systems.

• Experience with virtualisation technologies including VMware and Hyper-V.

• Solid understanding of networking concepts, including:

  • TCP/IP

  • DNS

  • DHCP

  • Firewalls

• Strong automation and scripting capabilities using:

  • PowerShell

  • Bash

  • Python

  • Ansible

  • Terraform

• Knowledge of cyber security controls, governance, and accreditation requirements.

• Experience working across the full systems engineering lifecycle.

• Proven experience delivering solutions within highly controlled and secure environments, including air-gapped, government, or defence environments.

• Strong analytical, problem-solving, and stakeholder management skills.

• Experience with cloud platforms including AWS and Azure.

• Infrastructure as Code (IaC) implementation experience.

• Experience integrating with enterprise services such as Active Directory, PKI, monitoring platforms, and SIEM solutions.

• Experience with DevSecOps tooling and CI/CD pipelines.

• API-driven automation of privileged account lifecycle management.

• Integration of PAM platforms with SIEM/SOC tooling for monitoring and audit.

• Experience with containerisation technologies including Docker and Kubernetes.

• Knowledge of enterprise Identity and Access Management (IAM) solutions.

This position requires active UK Developed Vetting (DV) clearance prior to commencement. Candidates without current DV clearance cannot be considered for this assignment.