> Markdown version of [/jobs/ext/2797563-pam-senior-engineer-architect-privileged-access-management](https://www.wearedevelopers.com/jobs/ext/2797563-pam-senior-engineer-architect-privileged-access-management). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # PAM Senior Engineer / Architect (Privileged Access Management) - **Company:** Turnkey Consulting Malaysia Sdn Bhd - **Location:** London, UK - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** JavaScript (Programming Language), Active Directory, Authentication Protocols, Software as a Service, Identity and Access Management, Java Database Connectivity, Lightweight Directory Access Protocols (LDAP), OAuth, Windows PowerShell, Azure Active Directory, Security Assertion Markup Language (SAML), Session Management, Scripting, Google Cloud, Enterprise Software Applications, Okta, Cyberark, HR Software, SailPoint, BeanShell, Servicenow - **Published:** September 8, 2026 - **Apply:** https://www.collegerecruiter.com/job/2840619532-pam-senior-engineer--architect-privileged-access-management ## About the Role We are looking for a Senior PAM Engineer or Architect with strong experience in Privileged Access Management (PAM) to join our Identity & Access Management practice. You will play a leading role in delivering and optimising PAM solutions for our clients, working across the full project lifecycle and engaging with stakeholders at all levels. We welcome applications from individuals with a proven track record in implementing PAM solutions, particularly those with expertise in Delinea, CyberArk, or BeyondTrust. Experience with IGA (especially SailPoint or similar technologies) is highly advantageous, as is exposure to broader identity and authentication technologies. Your skills and experience will be assessed against the requirements of the role, and we offer two grades: Senior Engineer and Architect. The Architect grade includes additional responsibilities around technical leadership, solution design, and commercial/project management., * 3-5 years' experience delivering PAM solutions, with a strong focus on Delinea, CyberArk, BeyondTrust, or similar platforms. * Hands-on experience with privileged account lifecycle management, credential vaulting, session monitoring, and access reviews. * Strong understanding of authentication protocols and technologies (SSO, MFA, Entra, Azure AD, LDAP, SAML, OAuth). * Experience integrating PAM platforms with HR systems, ServiceNow, and other enterprise applications. * Proficiency in scripting (PowerShell, JavaScript, BeanShell) and API integration (REST, SCIM, JDBC). * Excellent communication and stakeholder management skills, with the ability to explain complex technical concepts to non-technical audiences. * Consulting mindset, with experience gathering and analysing business requirements and translating them into technical solutions. * Experience producing high-quality deliverables and documentation. * Proactive, self-driven, and collaborative approach to problem-solving and project delivery., * 5+ years' experience delivering PAM solutions, with deep expertise in Delinea, CyberArk, BeyondTrust, and broader IAM technologies. * Demonstrated experience in technical leadership, solution architecture, and end-to-end project delivery. * Proven ability to design scalable, secure, and future-proof PAM solutions for complex enterprise environments. * Experience managing commercial outcomes and contributing to project management activities. Desirable Skills * Experience with IGA solutions (SailPoint or similar technologies). * Product certifications in PAM or IGA platforms. * Experience with cloud identity systems (Entra AD, Okta, GCP, AWS IAM). * Familiarity with regulatory frameworks and audit requirements. * Project management or commercial experience (for Architect grade). * Experience in professional services consulting, ideally with Big-4 or similar. ## Description * Lead or contribute to the design, configuration, and deployment of PAM solutions (SaaS, cloud, and on-prem), ensuring alignment with business, security, and compliance requirements. * Implement and optimise privileged access controls, including credential vaulting, session management, and monitoring. * Integrate PAM platforms with enterprise systems (Active Directory, Entra, LDAP, HR systems, ServiceNow, etc.). * Support authentication and access management initiatives, including SSO, MFA, and passwordless authentication. * Collaborate with clients to gather requirements, facilitate workshops, and translate business needs into actionable technical solutions. * Produce high-quality technical documentation, configuration guides, and process documentation. * Provide technical leadership and mentoring to junior team members. * Troubleshoot and resolve complex PAM and IAM issues, ensuring smooth project delivery. * Stay current with industry trends, best practices, and emerging technologies in PAM and IAM. Additional responsibilities for Architect Grade * Own the end-to-end technical design and architecture of PAM solutions, ensuring scalability, security, and future-proofing. * Deliver high- and low-level solution designs, technical roadmaps, and transition plans. * Lead technical discussions with clients, stakeholders, and delivery teams, acting as a subject matter expert. * Oversee project delivery, manage commercial outcomes, and contribute to project management activities. * Drive continuous improvement in solution delivery, process optimisation, and client outcomes. * Represent Turnkey in client engagements, industry events, and thought leadership initiatives. ## Related Videos - [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Delay the AI Overlords: How OAuth and OpenFGA Can Keep Your AI Agents from Going Rogue](https://www.wearedevelopers.com/videos/1637-delay-the-ai-overlords-how-oauth-and-openfga-can-keep-your-ai-agents-from-going-rogue) - [Checkmate: 5 Real Incidents That Can End a Software Company](https://www.wearedevelopers.com/videos/100126-checkmate-5-real-incidents-that-can-end-a-software-company) - [Going Beyond Passwords: The Future of User Authentication](https://www.wearedevelopers.com/videos/714-going-beyond-passwords-the-future-of-user-authentication) - [Advanced Cypress: custom assertions and tasks](https://www.wearedevelopers.com/videos/790-advanced-cypress-custom-assertions-and-tasks) ## Related Articles - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Dev Digest 121 - AI goes offline](https://www.wearedevelopers.com/magazine/456-dev-digest-121-ai-goes-offline) - [Where To Find Software Engineering Jobs](https://www.wearedevelopers.com/magazine/396-where-to-find-software-engineering-jobs) - [Find a Developer Job: 12 Best Job Sites For Developers](https://www.wearedevelopers.com/magazine/165-find-a-developer-job-12-best-job-sites-for-developers) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)