IAM/PAM Delivery Consultant

IAM/PAM Delivery Consultant

Identity \& Privileged Access Uplift Programme · Financial Services · Fixed\-Term Engagement

London, UK (Hybrid) Contract Role

ABOUT NETBUILDER

NETbuilder has been delivering digital, software and consulting excellence to financial services, government and commercial clients since 1999\. We back a world\-class team of consultants with the training, tooling and mentoring to do their best work — and we deliver differently: fixed price, fixed term, against a fixed, evidenced outcome per milestone, not open\-ended hours. Our culture runs on three things — Energy, Empathy and Enjoyment — and we're looking for our next IAM/PAM specialist to bring all three to a high\-profile identity security programme.

THE OPPORTUNITY

We're recruiting an experienced IAM/PAM Delivery Consultant to join the team delivering a major Identity and Privileged Access Management uplift programme for a Tier 1 financial services client. This is high\-risk, high\-visibility remediation work: reconciling privileged accounts across Active Directory, SailPoint and HiPAM, closing entitlement and lifecycle gaps, assuring privileged access controls, and standing up the metrics that prove the controls actually work — all against a fixed set of milestones, acceptance criteria and evidenced deliverables.

You'll work directly alongside the client's IAM Governance, UAM Operations and Platform teams, reporting into a structured governance cadence (weekly working group, fortnightly design/control/risk review, monthly steering committee), and producing evidence packs that satisfy IT Risk and GRC scrutiny.

WHAT YOU'LL DELIVER

• Build a single, reconciled view of the privileged and high\-value account population across Active Directory, SailPoint and HiPAM — with an approve/remove/remediate decision against every account and a named owner.


• Confirm SailPoint's application and entitlement coverage against the CMDB application list, starting with the UK before extending the method to other client regions.


• Trace joiner, mover and leaver processes end to end, identify where legacy automation has silently broken, and put interim controls and escalation routes in place.


• Review a risk\-based sample of privileged access logs — checkout, break\-glass and session activity — against the client's own PAM Standard, and recommend a risk\-based approach to ongoing monitoring.


• Triage high\-risk, low\-effort findings into quick fixes, interim controls or longer\-term design items, and execute the quick fixes directly.


• Define and baseline the programme's core Phase 1 metrics: definition, data source, owner, frequency, threshold and escalation route for each.


• Produce clean, evidenced documentation including but not limited to — registers, RACI, metrics baseline and a sequenced ongoing roadmap.

• Proven hands\-on delivery experience across IAM/PAM platforms and processes — SailPoint (or equivalent IGA tooling), a PAM/vaulting solution (e.g. CyberArk, HiPAM or similar), and Active Directory at scale.


• Solid grasp of privileged account governance, entitlement/RBAC and segregation\-of\-duties concepts, and identity lifecycle (joiner/mover/leaver) controls.


• Experience delivering into regulated, audit\-scrutinised environments — financial services strongly preferred — including producing evidence that satisfies IT Risk and GRC functions.


• Comfortable working to fixed milestones and acceptance criteria rather than open\-ended hours, with the discipline to document decisions, owners and evidence as you go.


• Strong stakeholder management: confident running workshops and reconciling requirements across governance, operations and platform teams, and able to work with distributed teams where necessary.


• Clear, structured written communication — you'll be producing registers, control maps and board\-ready assurance reports, not just working the tooling.

Real delivery, real impact:

*Work on a milestone\-based programme with a defined start, clear acceptance criteria and evidenced outcomes — not an open\-ended bench assignment.*

Grown\-up support:

*Full backing from NETbuilder's consulting practice, plus continuous professional development and recognised certifications as you progress.*

Culture that means something:

*Energy, Empathy and Enjoyment aren't a poster on the wall — they shape how our teams work with each other and with clients, every day.*

Sector depth:

*Since 1999, NETbuilder has built specialist delivery capability across financial services, government and commercial markets — you'll be surrounded by people who've done this before.*

Work authorisation:

• United Kingdom (required)

This listing is from Indeed. View original listing ↗