PAM Monitoring & Session Review Specialist (Unix/Linux/Solaris) – 6 month contract
Up to £550 per day - Inside IR35
Fully Remote in UK
Overview
Detail-oriented PAM Monitoring & Session Review Specialist to support security operations through deep session monitoring, activity validation, and audit assurance across privileged environments.
This resource is focused on reviewing recorded privileged sessions, aligning activity to approved change tickets, and identifying any deviations, risks, or unapproved actions—particularly within Oracle Solaris, Unix, and Linux environments.
This is structured, mandated work requiring high attention to detail, consistency, and accountability.
Key Responsibilities
- Review recorded privileged sessions (PAM tooling) to validate user activity
- Cross-reference session behaviour against:
- Approved change tickets
- Documented maintenance tasks (e.g. Oracle patching)
- Validate that:
- Actions performed match what was approved and expected
- No unauthorised or unexpected activity has occurred
- Identify, document, and report exceptions, anomalies, or policy breaches
- Hold internal teams and service providers (e.g. SBS/MSPs) accountable for delivery against agreed activities
- Provide clear, structured audit reports and findings
- Contribute to improving monitoring quality and governance processes
Key Requirements
- Strong experience with Privileged Access Management (PAM) and session recording tools (e.g. CyberArk or similar)
- Hands‑on expertise across:
- Oracle Solaris
- Unix & Linux environments
- Oracle Databases
- Proven experience reviewing:
- Privileged sessions
- Change tickets / ITSM workflows
- Operational activity vs approved scope
- Strong understanding of:
- System administration activities (patching, maintenance, access changes)
- Security monitoring and audit processes
- High level of attention to detail and ability to follow structured processes
Key Behaviours / Profile
- Methodical and detail-driven – comfortable reviewing sessions line‑by‑line
- Process‑oriented – willing to perform structured, repeatable monitoring tasks
- Accountable mindset – confident calling out discrepancies and holding teams to standards
- Resilient – comfortable working in what can be repetitive or "boring" monitoring work
- Analytical thinker – able to connect activity back to intent (e.g. change ticket vs actual execution)
Success Criteria
- Accurate validation of privileged activity vs approved changes
- Identification and reporting of exceptions and non‑compliant behaviour
- Improved accountability across internal teams and service providers
- High‑quality, consistent audit and monitoring output
