About the Role
Detail-oriented PAM Monitoring & Session Review Specialist to support security operations through deep session monitoring, activity validation, and audit assurance across privileged environments. This resource is focused on reviewing recorded privileged sessions, aligning activity to approved change tickets, and identifying any deviations, risks, or unapproved actions—particularly within Oracle Solaris, Unix, and Linux environments. This is structured, mandated work requiring high attention to detail, consistency, and accountability.
Responsibilities
- Review recorded privileged sessions (PAM tooling) to validate user activity
- Cross-reference session behaviour against approved change tickets and documented maintenance tasks
- Validate that actions performed match what was approved and expected
- Validate that no unauthorised or unexpected activity has occurred
- Identify, document, and report exceptions, anomalies, or policy breaches
- Hold internal teams and service providers accountable for delivery against agreed activities
- Provide clear, structured audit reports and findings
- Contribute to improving monitoring quality and governance processes
Requirements
- Strong experience with Privileged Access Management (PAM) and session recording tools (e.g. CyberArk or similar)
- Hands-on expertise across Oracle Solaris, Unix & Linux environments, and Oracle Databases
- Proven experience reviewing privileged sessions, change tickets / ITSM workflows, and operational activity vs approved scope
- Strong understanding of system administration activities (patching, maintenance, access changes) and security monitoring and audit processes
- High level of attention to detail and ability to follow structured processes
- Methodical and detail-driven – comfortable reviewing sessions line-by-line
- Process-oriented – willing to perform structured, repeatable monitoring tasks
- Accountable mindset – confident calling out discrepancies and holding teams to standards
- Resilient – comfortable working in what can be repetitive or “boring” monitoring work
- Analytical thinker – able to connect activity back to intent (e.g. change ticket vs actual execution)
Skills
- Privileged Access Management (PAM)
- Session recording tools (e.g. CyberArk)
- Oracle Solaris
- Unix
- Linux
- Oracle Databases
- Reviewing privileged sessions
- Reviewing change tickets
- Reviewing ITSM workflows
- Reviewing operational activity
- System administration
- Security monitoring
- Audit processes
Location
- Fully Remote in UK
Work Type
- 6 month contract
- Inside IR35
Salary/Compensations
- Up to £550 per day
