PAM Architect

Wpp; Greater London; Hybrid; GBP 90,000 - 130,000; Full time

Job summary

WPP is hiring a Senior PAM Architect to define and secure privileged access across the global estate. You will set standards for vaulting, session control and onboarding, while guiding partners on architecture decisions.

We seek expertise in PAM architecture, Beyond Trust, and security frameworks. You will influence platform direction and ensure design authority across enterprise-scale deployments.

Qualifications

• Expert PAM architecture and privileged-access design.
• Knowledge of vaulting, session management and just-in-time access.
• Security architecture and compliance frameworks.
• Integration design across infrastructure and applications.
• Design-authority and documentation experience.
• Recognised architecture experience at enterprise scale.
• Relevant architecture or platform certifications (e.g. TOGAF).
• Degree in a relevant discipline or equivalent experience.

Responsibilities

• Design the PAM architecture, controls model and onboarding patterns.
• Set standards for privileged-account discovery, vaulting and session control.
• Assure partner-delivered PAM designs meet security and standards.
• Embed least-privilege and zero-trust principles.
• Advise the product owner on platform direction.
• Act as design authority for partner architecture decisions.
• Ensure alignment with WPP security, resilience and standards.

Skills

PAM architecture

Privileged-access design

Just-in-time access

Security architecture

Integration design

Design authority

Documentation experience

Enterprise-scale architecture

Strategic decision-making

Platform direction awareness

Education

Degree in a relevant discipline

TOGAF Certification

Vendor architect tracks

Tools

Beyond Trust

PAM vaulting

Session-management tooling

Job description

WPP is the trusted growth partner for the world’s leading brands.

We unite cutting-edge media intelligence and data solutions, world-class creativity, next-generation production, transformative enterprise solutions and expert strategic counsel in a single company – powered by exceptional talent and our agentic marketing platform, WPP Open, to help our clients navigate change, capture opportunity and deliver transformational growth.

We work with the world's most valuable brands and have global reach across 100+ markets, with deep local expertise.

Our people are the key to our success. We're committed to fostering a culture of creativity, belonging and continuous learning, attracting and developing the brightest talent, and providing exciting career opportunities that help our people grow.

For more information, visit WPP.com.

Why we're hiring:

WPP Enterprise Technology provides Technology services for WPP, the world’s largest communications services group. As a creative transformation company, WPP is helping its clients transform the future through extraordinary work. WPP ET is an integral part of that journey, and we are proud to provide technology for some of the world’s most creative brands.

Define the PAM target architecture and controls model, ensuring privileged access is secured by design across the global estate. A retained architecture role setting standards for Kyndryl and engineers.

What you'll be doing:

• Design the PAM architecture, controls model and onboarding patterns.
• Set standards for privileged-account discovery, vaulting and session control.
• Assure partner-delivered PAM designs and changes.
• Embed least-privilege and zero-trust principles.
• Advise the product owner on platform direction.
• Set the architecture, patterns and guardrails that Kyndryl implements and operates within.
• Assure that partner-delivered designs and changes meet WPP security, resilience and standards.
• Act as design authority and approval gate for partner architecture decisions.

What you'll need:

• Expert PAM architecture and privileged-access design.
• Expert Beyond Trust product knowledge
• Knowledge of vaulting, session management and just-in-time access.
• Security architecture and compliance frameworks.
• Integration design across infrastructure and applications.
• Design-authority and documentation experience.
• Recognised architecture experience in the relevant domain at enterprise scale.
• Relevant architecture or platform certifications (e.g. TOGAF or vendor architect tracks).
• Degree in a relevant discipline or equivalent experience.
• Sets the target architecture, standards and design patterns for the domain.
• Designs for security, scale, resilience and total cost of ownership.
• Influences engineering and vendor teams without direct authority.
• Balances strategic ambition with pragmatic, deliverable decisions.
• Stays current with platform direction and emerging capability.

Who you are:

You're open: We are inclusive and collaborative; we encourage the free exchange of ideas; we respect and celebrate diverse views. We are open-minded: to new ideas, new partnerships, new ways of working.

You're optimistic: We believe in the power of creativity, technology and talent to create brighter futures or our people, our clients and our communities. We approach all that we do with conviction: to try the new and to seek the unexpected.

You're extraordinary: we are stronger together: through collaboration we achieve the amazing. We are creative leaders and pioneers of our industry; we provide extraordinary every day.

What we’ll give you:

Passionate, inspired people - We aim to create a culture in which people can do extraordinary work.

Scale and opportunity - We offer the opportunity to create, influence and complete projects at a scale that is unparalleled in the industry.

Challenging and stimulating work - Unique work and the opportunity to join a group of creative problem solvers. Are you up for the challenge?

#LI-Hybrid

We believe the best work happens when we're together, fostering creativity, collaboration, and connection. That's why we've adopted a hybrid approach, with teams in the office around four days a week. If you require accommodations or flexibility, please discuss this with the hiring team during the interview process.

WPP is an equal opportunity employer and considers applicants for all positions without discrimination or regard to particular characteristics. We are committed to fostering a culture of respect in which everyone feels they belong and has the same opportunities to progress in their careers.

Please read our Privacy Notice (https://www.wpp.com/en/careers/wpp-privacy-policy-for-recruitment) for more information on how we process the information you provide.