Cyber Security Consultant

Role purpose

Version 1 is seeking an experienced IAM/PAM Specialist to support the Identity & Access Lead in administering and maintaining enterprise Identity & Access Management (IAM) and Privileged Access Management (PAM) solutions. The role is critical in ensuring secure, efficient, and compliant identity services across the organisation.

The ideal candidate will demonstrate expertise in IAM/PAM systems, strong analytical skills, and a commitment to automation and continuous improvement.

Key responsibilities

• Lead operational security initiatives across infrastructure and cloud environments.
• Implement and maintain network security controls, including firewalls and segmentation
• Conduct vulnerability assessments and manage remediation workflows
• Administer and maintain IAM and PAM platforms, ensuring availability, security, and optimal performance.
• Oversee provisioning, de-provisioning, onboarding, offboarding, and role/permission changes throughout the user lifecycle.
• Collaborate with cross-functional teams to define and implement governance frameworks, role models, and access controls across the enterprise.
• Maintain comprehensive documentation of IAM processes and controls; produce reports on risks, incidents, and compliance gaps for management.
• Perform regular access certifications, permissions audits, and reviews for external users to ensure adherence to security standards.
• Contribute to IAM/PAM-related initiatives, integrations, and upgrades, working closely with IT and cybersecurity teams.
• Develop and implement automation to streamline identity processes and strengthen controls.

Essential experience & skills

• Bachelors degree in a STEM discipline (Science, Technology, Engineering, Mathematics).
• 3-5 years of proven experience in Identity and Access Management, with deep knowledge of IAM/PAM principles, technologies, and frameworks.
• Strong expertise in Identity Governance & Administration (IGA), Single Sign-On (SSO), Multi-Factor Authentication (MFA), and Privileged Access Management.
• Hands-on experience with platforms such as Microsoft Entra ID, Okta, Ping Advanced Identity Cloud, OneIdentity Safeguard, or similar tools (e.g., SailPoint, BeyondTrust, CyberArk).
• Practical applications onboarding experience (Active Directory, LDAP, API-based integrations) , OAuth, OIDC, SAML.
• Basic scripting/development skills (Python, PowerShell).
• Solid knowledge of IAM standards and protocols, including ISO/NIST frameworks, SCIM, RBAC, HBAC, and review workflows.
• Strong problem-solving skills with the ability to deliver results in complex, high-performing environments.
• Excellent collaboration and communication skills

Certifications (highly desirable)

• Certifications such as CISSP, CISM, or GIAC
• Experience with automation and scripting for security operations (e.g., PowerShell, Python)
• Experience with PingIdentity and/or OneIdentity solutions.
• Exposure to automation in identity services.
• Exposure to security in containerised or microservices architectures.