PAM Architect

Iceberg; Surrey; Hybrid; GBP 90,000 - 120,000; Full time

Job summary

Iceberg is seeking a Privileged Access Management (PAM) Architect to shape the enterprise's identity security programme across on‑premises, cloud and SaaS environments. Based in Surrey with hybrid work, you will define architecture, strategy and technical direction for PAM within a large, regulated organisation.

You will collaborate with security, infrastructure, cloud and engineering teams to embed privileged access controls, lead PAM initiatives from design to implementation, and translate

Responsibilities

• Define and evolve the PAM strategy and architecture.
• Design secure, scalable PAM solutions across on‑prem and cloud environments.
• Collaborate with security, infrastructure, cloud and engineering teams to embed privileged access controls.
• Lead the architecture and design of PAM platforms, integrations and operating models.
• Ensure privileged access aligns with Zero Trust principles balancing security and usability.
• Provide technical leadership throughout PAM initiatives from design to implementation.

Skills

PAM architecture

CyberArk

AD/Entra ID

Azure/AWS

Identity security

Stakeholder collaboration

Job description

Privileged Access Management (PAM) Architect

Surrey - Hybrid

As organisations continue to expand across cloud, SaaS and hybrid environments, securing privileged identities has become one of the most critical challenges in cyber security. We're partnering with a leading global organisation in a highly regulated industry that is investing heavily in its Enterprise Identity capability and is looking to appoint a PAM Architect to help shape the future of its identity security programme.

This is an opportunity to join a collaborative, engineering-led security team where you'll define the architecture, strategy and technical direction for Privileged Access Management across a large, complex enterprise.

What you'll be doing

• Define and evolve the organisation's Privileged Access Management strategy and architecture.
• Design secure, scalable PAM solutions across on-premises, cloud and SaaS environments.
• Work closely with security, infrastructure, cloud and engineering teams to embed privileged access controls across the enterprise.
• Lead the architecture and design of PAM platforms, integrations and operating models.
• Ensure privileged access aligns with Zero Trust principles while balancing security, usability and operational efficiency.
• Provide technical leadership throughout major PAM initiatives, guiding projects from design through to implementation.
• Translate complex technical challenges into practical solutions that reduce cyber risk across the organisation.

What we're looking for

We're looking for someone who combines strong technical expertise with the ability to influence architecture across a large enterprise.

To be considered you'll have experience with:

• Privileged Access Management architecture and enterprise-scale solution design.
• CyberArk (self-hosted or SaaS), or another leading PAM platform.
• Microsoft Active Directory, Entra ID and hybrid identity.
• Cloud platforms such as Azure and/or AWS.
• Identity security, authentication and privileged access controls.
• Working with technical and business stakeholders to deliver secure, pragmatic solutions.

This is an excellent opportunity to influence the direction of enterprise identity security within a globally recognised organisation, working on complex technical challenges with the backing of an experienced and well-established cyber security function.