Senior PAM/PIM Engineer - CyberArk, Entra ID PIM, Azure, AWS in West Bromwich

Senior Privileged Access Management (PAM)/Privileged Identity Management (PIM) Engineer Contract AxiaMetrics is recruiting a Senior PAM/PIM Engineer for an enterprise client. You will design, implement and support privileged access and identity security across on-premises, cloud and hybrid environments, as part of the client's Zero Trust programme. KEY SKILLS - Microsoft Entra ID PIM: JIT/JEA access, approval workflows, access reviews, role governance - Enterprise PAM tooling: CyberArk PAS/Privilege Cloud, BeyondTrust, Delinea (Thycotic), ARCON, One Identity Safeguard or HashiCorp Vault - Azure (RBAC, Management Groups, Key Vault, Policy, Conditional Access) and AWS (IAM, Organizations, IAM Identity Center, KMS, Security Hub) - PowerShell, Python, REST APIs, Terraform/ARM templates THE ROLE - Design, implement and administer enterprise PAM solutions - Secure privileged, shared and service accounts and application credentials, using vaulting, password rotation and session management - Configure privileged session monitoring, recording and auditing - Onboard infrastructure, applications, databases and cloud platforms into PAM - Implement and manage Entra ID PIM, plus RBAC and ABAC frameworks - Secure privileged access across Azure subscriptions, Entra ID roles, AWS IAM roles and AWS Organizations - Integrate PAM with Entra ID, Active Directory, LDAP, SailPoint, Saviynt, Okta, Ping Identity and ServiceNow - Support SSO, MFA and identity federation initiatives - Lead privileged