PRIVILEGED ACCESS MANAGEMENT (PAM) ARCHITECT

An exciting opportunity for a Privileged Access Management (PAM Architect) or Lead Cyber Engineer looking to step up and join a growing global financial services business to define and lead the privileged access strategy, target architecture and solution designs across a hybrid estate — reducing the risk carried by privileged human, administrative and service identities.

Key Responsibilities

* Set the target architecture — principles, standards, reference designs and the roadmap to reach them

* Embed privileged access controls consistently across on-premises infrastructure, AWS, Azure and SaaS

* Oversee implementations and provide design assurance, without owning day-to-day operations

* Align privileged access to Zero Trust and the wider enterprise identity strategy

* Balance security against usability — controls administrators can't live with don't survive

* Carry designs through Security, Cloud, Infrastructure and Risk without positional authority.

Key Skills / Experience

* Enterprise PAM architecture ownership — you personally defined a target state, not just ran the platform

* CyberArk architecture and deployment experience, self-hosted or Privilege Cloud, with implementation oversight

* CyberArk Sentry certification or higher, backed by hands-on deployment evidence

* Strong Active Directory and Microsoft Entra ID foundations, with real AWS and Azure exposure

* Regulated or high-consequence control experience — risk, audit, evidence

* Senior stakeholder influence: the ability to get a design adopted, not just approved

* Financial services background,

* CyberArk Guardian, CISSP / CCSP / SC-300,

* Privilege Cloud migration,

* secrets management and non-human identity,

* endpoint privilege management,

* cloud-native just-in-time access,

* automation via PowerShell, APIs or Terraform
Only candidates based in UK and eligible to work in UK are allowed