PAM Specialist

On behalf of UKAEA, we are looking for a PAM Specialist (Inside IR35) until 31/03/2026 based Hybrid in Culham.

As a PAM Specialist, your main responsibilities will be:
. Implement and configure BeyondTrust Password Safe for credential vaulting and management
. Deploy and manage BeyondTrust Privileged Remote Access for secure vendor and admin access
. Configure automated password rotation policies for privileged and service accounts
. Implement privileged session recording, monitoring, and keystroke logging
. Configure Just-in-Time (JIT) access workflows and approval processes
. Onboard Windows, Linux/Unix Servers, network devices, and applications to the PAM platform
. Discover and vault service accounts, application accounts, and shared credentials
. Configure Smart Rules for automated account discovery and management
. Implement session Proxy configurations for RDP, SSH, and application access
. Develop break-glass procedures and emergency access workflows
. Integrate BeyondTrust with SIEM for security monitoring and alerting
. Configure BeyondTrust connectors for Active Directory, Entra ID, and target systems
. Manage platform upgrades, patching, and health monitoring
. Troubleshoot connector issues, session failures, and platform errors
. Maintain documentation of PAM configurations, policies, and operational runbooks
. Support audit and compliance activities with reporting and evidence gathering

Essential:
. Strong understanding of credential vaulting, password rotation, and check-in/check-out workflows
. Experience configuring privileged session recording and monitoring
. Knowledge of service account discovery and life cycle management
. Experience onboarding Windows Server, Linux/Unix, and network devices to PAM platforms

Please be aware that this role can only be worked within the UK and not Overseas.

Disability Confident

As a member of the Disability Confident Scheme, UKAEA guarantees to interview all candidates who have a disability and who meet all the essential criteria for the vacancy. In cases where we have a high volume of candidates who have a disability who meet all the essential criteria, we will interview the best candidates from within that group. This scheme encourages candidates with a disability and/or neurodivergence to apply.

DE&I Commitment

UKAEA guarantees to interview all candidates who have a disability and who meet all the essential criteria for the vacancy. In cases where we have a high volume of candidates who have a disability who meet all the essential criteria, we will interview the best candidates from within that group. This scheme encourages candidates with a disability and/or neurodivergence to apply. In exceptional circumstances, we may also need to apply the desirable criteria in our shortlisting process which may include holding active security clearance.

Armed Forces Covenant

UKAEA guarantees to interview veterans or spouses/partners of military personnel who meet all the essential criteria for the vacancy. In cases where we have a high volume of ex-military candidates/military spouses or partners, who meet all of the essential criteria, we will interview the best candidates from within that group. In exceptional circumstances, we may also need to apply the desirable criteria in our shortlisting process which may include holding active security clearance.

In applying for this role, you acknowledge the following "this role falls in scope of the Off Payroll Working in the Public Sector legislation. Any rates of payment quoted will reflect the gross rate per day for the assignment and will be subject to appropriate taxes and statutory costs. As such the payment to the intermediary and your income resulting from this contract will be different".