Role: PAM Specialist Contract Length: initial contract 3 months Location: hybrid working in Culham Role Overview The PAM Specialist will lead the hands-on implementation, configuration, and ongoing management of the organisation''s Privileged Access Management (PAM) platform. Embedded within the Cyber Security team, the role is responsible for deploying and operating BeyondTrust Password Safe, Privileged Remote Access, and associated components to secure privileged access across the enterprise. This is a highly technical, delivery-focused role requiring deep expertise in BeyondTrust PAM technologies. You will work closely with infrastructure teams, application owners, and security operations to ensure privileged accounts are securely vaulted, access is tightly controlled, sessions are monitored, and least-privilege principles are consistently enforced. Key Accountabilities Implement, configure, and operate BeyondTrust Password Safe for enterprise credential vaulting Deploy and manage BeyondTrust Privileged Remote Access for secure administrator and third-party access Configure automated password rotation for privileged, service, and application accounts Implement privileged session monitoring, recording, and keystroke logging Design and configure Just-in-Time (JIT) access workflows and approval processes Onboard Windows, Linux/Unix Servers, network devices, and applications into the PAM platform Discover, onboard, and manage service accounts, application accounts, and shared