About the Role
AspenView is seeking an experienced Privileged Access Management (PAM) Specialist to design and build a privileged access management capability from the ground up for a strategic enterprise client. With the client’s current PAM maturity effectively at zero, this is a greenfield engagement: you will own PAM discovery, vaulting design, just-in-time (JIT) access workflows, session recording, and the integration of privileged access controls into the broader Identity Governance and Administration (IGA) model.
Working across a complex hybrid estate, you will establish foundational privileged access controls and scale them to protect up to 500 privileged users.
The shift hours for this role are allocated in European timezone.
What You Will Do:
Privileged Account Discovery
- Perform privileged account discovery across a hybrid estate, including Active Directory, Windows and Linux servers, and databases.
- Catalog and classify privileged, shared, and external privileged accounts to establish a complete access baseline.
Credential Vaulting & Rotation
- Design and implement secure credential vaulting with automated password rotation.
- Define policies and controls for the full lifecycle management of privileged credentials.
Just-in-Time Access
- Design and implement just-in-time (JIT) privilege elevation workflows to eliminate standing privileged access.
Session Management
- Deploy privileged session proxy and session recording capabilities to support monitoring, audit, and forensic review.
Governance Integration
- Integrate PAM controls with IGA certification and access-review workflows so that privileged access remains governed and compliant.
- Partner with identity governance stakeholders to align PAM with the wider IGA operating model.
Scale & Scope
- Build initially for up to 250 privileged users, scaling to 500, spanning AD and Entra ID administrators, Windows/Linux servers, databases, network and security devices, SAP administrators, ServiceNow ad