About this role
Salary: £80,000 - 85,000 per year
Requirements: Enterprise PAM architecture ownership, with direct experience defining a target state rather than only operating a platformCyberArk architecture and deployment experience, including self-hosted or Privilege Cloud, with implementation oversightCyberArk Sentry certification or higher, supported by hands-on deployment evidenceStrong Active Directory and Microsoft Entra ID foundations, with practical AWS and Azure exposureExperience in regulated or high-consequence environments, including risk, audit, and evidence managementStrong senior stakeholder influence and the ability to get designs adopted, not just approvedFinancial services backgroundCyberArk Guardian, CISSP, CCSP, or SC-300 certification desirablePrivilege Cloud migration experience desirableExperience with secrets management and non-human identity desirableExperience with endpoint privilege management desirableExperience with cloud-native just-in-time access desirableAutomation experience using PowerShell, APIs, or Terraform desirable Responsibilities: Define our privileged access target architecture, including principles, standards, reference designs, and the roadmap to achieve themEmbed privileged access controls consistently across our on-premises infrastructure, AWS, Azure, and SaaS environmentsOversee implementations and provide design assurance without owning day-to-day operationsAlign privileged access with Zero Trust and our wider enterprise identity strategyBalance security and usability so our administrators can work effectively while remaining protectedInfluence Security, Cloud, Infrastructure, and Risk stakeholders to adopt our designs without relying on positional authority Technologies: AWSActive DirectoryArchitectAzureCloudPowerShellSecuritySentryTerraform More:
We are a growing global financial services business offering an exciting opportunity for a Privileged Access Management Architect or Lead Cyber Engineer to step up and shape our privileged access strategy across a hybrid estate. In this role, we focus on reducing the risk associated with privileged human, administrative, and service identities while working across Security, Cloud, Infrastructure, and Risk to deliver practical, secure, and usable designs.
last updated 32 week of 2026