Job Search

We are seeking an experienced PAM Architect to design, develop and oversee secure privileged access management solutions across a complex technology environment. You will define the architectural direction for privileged identity, access controls and account governance, ensuring that solutions align with security policies, regulatory obligations and recognised industry standards. The role will involve working closely with cyber security, infrastructure, cloud, applications and risk teams to deliver a consistent and resilient approach to privileged access.

Your responsibilities will include assessing current PAM capabilities, defining target-state architecture and producing clear technical designs, standards and implementation roadmaps. You will provide guidance on the onboarding and management of privileged accounts, service accounts, applications, devices and cloud platforms, including password vaulting, credential rotation, session monitoring, just-in-time access and approval workflows. You will also support integration with identity providers, directories, security monitoring platforms and automated provisioning tools. As a senior technical authority, you will review proposed solutions, identify risks and dependencies, oversee architectural governance and contribute to the resolution of complex incidents or control weaknesses.

Applicants should have substantial experience designing and implementing PAM solutions within large or highly regulated environments, together with a strong understanding of privileged identity, zero-trust principles, identity governance and access control frameworks. Experience with leading PAM technologies, cloud platforms, automation and scripting will be important, as will knowledge of authentication protocols, directory services, logging and security operations. Relevant professional certifications in cyber security, identity and access management or architecture would be advantageous. You will need excellent communication and stakeholder management skills, with the ability to translate technical risks into practical recommendations for both technical and non-technical audiences. This is an opportunity to shape a strategic security capability and make a measurable contribution to the protection of critical systems and data.