Privileged Access Management Architect

• Define our privileged access target architecture, including principles, standards, reference designs, and the roadmap to achieve them
• Embed privileged access controls consistently across our on-premises infrastructure, AWS, Azure, and SaaS environments
• Oversee implementations and provide design assurance without owning day-to-day operations
• Align privileged access with Zero Trust and our wider enterprise identity strategy
• Balance security and usability so our administrators can work effectively while remaining protected
• Influence Security, Cloud, Infrastructure, and Risk stakeholders to adopt our designs without relying on positional authority

Technologies:

• AWS
• Active Directory
• Architect
• Azure
• Cloud
• PowerShell
• Security
• Sentry
• Terraform

More:

We are a growing global financial services business offering an exciting opportunity for a Privileged Access Management Architect or Lead Cyber Engineer to step up and shape our privileged access strategy across a hybrid estate. In this role, we focus on reducing the risk associated with privileged human, administrative, and service identities while working across Security, Cloud, Infrastructure, and Risk to deliver practical, secure, and usable designs.

• Enterprise PAM architecture ownership, with direct experience defining a target state rather than only operating a platform
• CyberArk architecture and deployment experience, including self-hosted or Privilege Cloud, with implementation oversight
• CyberArk Sentry certification or higher, supported by hands-on deployment evidence
• Strong Active Directory and Microsoft Entra ID foundations, with practical AWS and Azure exposure
• Experience in regulated or high-consequence environments, including risk, audit, and evidence management
• Strong senior stakeholder influence and the ability to get designs adopted, not just approved
• Financial services background
• CyberArk Guardian, CISSP, CCSP, or SC-300 certification desirable
• Privilege Cloud migration experience desirable
• Experience with secrets management and non-human identity desirable
• Experience with endpoint privilege management desirable
• Experience with cloud-native just-in-time access desirable
• Automation experience using PowerShell, APIs, or Terraform desirable