Idam / Pam Specialists

**Identity Access and Privileged Access Management Specialists.**
- 3-month contracts
- Multiple roles.
- Immediate start

My client is a leading consultancy firm throughout Melbourne that has recently partnered with a Victorian government department within the healthcare industry. They are currently on the lookout for an IDAM and PAM / PIM specialist to assist them in a critical security project to enhance their current infrastructure environment.

Please find details of job responsibilities below:
**PIM / PAM Specialist**:

- Setup PIM / PAM solution to provide just-in-time elevation to privileged accounts for pre-authorised accounts across Azure Active Directory and on premise.
- Setup PIM / PAM to allow temporary elevation of privileges for pre-determined time for role-based access to elevated privilege roles for AAD roles and on Prem roles + knowledge transfer to internal staff on how to implement additional workflows.
- Implement capability for privileged accounts to use separate privileged operating environments.
- Implement control so non-privileged accounts cannot login to privileged operating environments.
- Provide recommendations to implement control that ensures that MFA is enforced before privileges are elevated just in time.

**IDAM Specialist**:

- Report of all Active Directory accounts in the Purchaser’s domain, including all standard details in AD, including stop and start dates of each account, last login, expiry date, enabled status and last login.
- Attestation report for any accounts outside of Chris21 (Access Reviews AAD)
- Contractor, Vendor and non-Chris 21 accounts. Create an exception report if the expiry date of anyone outside of Chris21 is set to >90 days if there is no contract end date.
- Create a mechanism to link the admin account with the standard account to ensure consistent handling of accounts. This should include onboarding/offboarding for both Chris/Non-Chris accounts.
- Disable accounts which have been dormant for more than 45 days of inactivity where supported.
- Establish and maintain an inventory of service accounts in Active Directory.