PAM Architect

Wpp

Greater London

Hybrid

GBP 90,000 - 130,000

Full time

14 days+

A complete application in a minute

Tailored resume and cover letter, ready to send.

Get past ATS filters

Job summary

WPP Enterprise Technology seeks a senior PAM Architect to define and secure privileged-access across the global estate. You will design the PAM architecture, set standards and act as design authority for partner solutions, ensuring zero-trust and least-privilege principles.

Join a hybrid team and influence engineering and vendors while maintaining security, resilience and cost-of-ownership considerations. A strong background in security architecture and Beyond Trust is essential.

Qualifications

  • Demonstrated expert PAM architecture and privileged-access design.
  • Deep knowledge of vaulting, session control, and just-in-time access.
  • Strong security architecture and governance frameworks.
  • Experience in integration design across infrastructure and applications.
  • Proven design-authority and documentation experience.
  • Enterprise-scale architecture exposure and capabilities.
  • Certifications such as TOGAF or vendor tracks are desirable.
  • Degree or equivalent in a relevant field; ongoing learning a must.
  • Sets target architecture, standards, and design patterns for the domain.
  • Designs for security, scale, resilience and cost of ownership.
  • Able to influence engineering and vendor teams without direct authority.
  • Keeps up-to-date with platform direction and emerging capabilities.

Responsibilities

  • Design the PAM architecture and controls model for global estate.
  • Set standards for privileged-account discovery, vaulting and session control.
  • Ensure partner-delivered PAM designs meet security, resilience and standards.
  • Embed least-privilege and zero-trust principles across platforms.
  • Advise product owner on platform direction and architecture choices.
  • Define architecture patterns and guardrails implemented by partners like Kyndryl.
  • Act as design authority for partner architecture decisions.
  • Assure compliance with WPP security guidelines and enterprise standards.

Skills

PAM architecture
Privileged-access design
BeyondTrust expertise
Vaulting & session management
Security architecture
Integration design
Documentation & design authority
Enterprise-scale experience
TOGAF / vendor tracks
Security frameworks
Platform strategy
Influencing without authority
Cost of ownership

Education

Degree in a relevant discipline or equivalent experience

Tools

BeyondTrust

Job description

WPP is the trusted growth partner for the world’s leading brands.

We unite cutting-edge media intelligence and data solutions, world-class creativity, next-generation production, transformative enterprise solutions and expert strategic counsel in a single company – powered by exceptional talent and our agentic marketing platform, WPP Open, to help our clients navigate change, capture opportunity and deliver transformational growth.

We work with the world's most valuable brands and have global reach across 100+ markets, with deep local expertise.

Our people are the key to our success. We're committed to fostering a culture of creativity, belonging and continuous learning, attracting and developing the brightest talent, and providing exciting career opportunities that help our people grow.

For more information, visit WPP.com.

Why we're hiring:

WPP Enterprise Technology provides Technology services for WPP, the world’s largest communications services group. As a creative transformation company, WPP is helping its clients transform the future through extraordinary work. WPP ET is an integral part of that journey, and we are proud to provide technology for some of the world’s most creative brands.

Define the PAM target architecture and controls model, ensuring privileged access is secured by design across the global estate. A retained architecture role setting standards for Kyndryl and engineers.

What you'll be doing:
  • Design the PAM architecture, controls model and onboarding patterns.
  • Set standards for privileged-account discovery, vaulting and session control.
  • Assure partner-delivered PAM designs and changes.
  • Embed least-privilege and zero-trust principles.
  • Advise the product owner on platform direction.
  • Set the architecture, patterns and guardrails that Kyndryl implements and operates within.
  • Assure that partner-delivered designs and changes meet WPP security, resilience and standards.
  • Act as design authority and approval gate for partner architecture decisions.
What you'll need:
  • Expert PAM architecture and privileged-access design.
  • Expert Beyond Trust product knowledge
  • Knowledge of vaulting, session management and just-in-time access.
  • Security architecture and compliance frameworks.
  • Integration design across infrastructure and applications.
  • Design-authority and documentation experience.
  • Recognised architecture experience in the relevant domain at enterprise scale.
  • Relevant architecture or platform certifications (e.g. TOGAF or vendor architect tracks).
  • Degree in a relevant discipline or equivalent experience.
  • Sets the target architecture, standards and design patterns for the domain.
  • Designs for security, scale, resilience and total cost of ownership.
  • Influences engineering and vendor teams without direct authority.
  • Balances strategic ambition with pragmatic, deliverable decisions.
  • Stays current with platform direction and emerging capability.
Who you are:

You're open: We are inclusive and collaborative; we encourage the free exchange of ideas; we respect and celebrate diverse views. We are open-minded: to new ideas, new partnerships, new ways of working.

You're optimistic: We believe in the power of creativity, technology and talent to create brighter futures or our people, our clients and our communities. We approach all that we do with conviction: to try the new and to seek the unexpected.

You're extraordinary: we are stronger together: through collaboration we achieve the amazing. We are creative leaders and pioneers of our industry; we provide extraordinary every day.

What we'll give you:

Passionate, inspired people – We aim to create a culture in which people can do extraordinary work.

Scale and opportunity – We offer the opportunity to create, influence and complete projects at a scale that is unparalleled in the industry.

Challenging and stimulating work – Unique work and the opportunity to join a group of creative problem solvers. Are you up for the challenge?

#LI-Hybrid

We believe the best work happens when we're together, fostering creativity, collaboration, and connection. That's why we’ve adopted a hybrid approach, with teams in the office around four days a week. If you require accommodations or flexibility, please discuss this with the hiring team during the interview process.

WPP is an equal opportunity employer and considers applicants for all positions without discrimination or regard to particular characteristics. We are committed to fostering a culture of respect in which everyone feels they belong and has the same opportunities to progress in their careers.

Please read our Privacy Notice (https://www.wpp.com/en/careers/wpp-privacy-policy-for-recruitment) for more information on how we process the information you provide.

Find more English Speaking Jobs in United Kingdom on Arbeitnow

Get your free, confidential resume review.

or drag and drop your file here.

Similar jobs

Similar jobs worth comparing

Enterprise Architect – Modern Workplace
Enterprise Architect – Modern Workplace

Wpp • Greater London

Hybrid
GBP 120,000 - 160,000
Hybrid work model
Okta Architect
Okta Architect

Wpp • Greater London

Hybrid
GBP 90,000 - 120,000
Business Security Director
Business Security Director

Wpp • Greater London

Hybrid
GBP 120,000 - 160,000
Office Technology Product Owner
Office Technology Product Owner

Wpp • Greater London

Hybrid
GBP 70,000 - 110,000
Hybrid work
M365 Architecture & Engineering Lead
M365 Architecture & Engineering Lead

WPP • Greater London

On-site
GBP 90,000 - 120,000
Sales Security Engineer
Sales Security Engineer

wppmedia • Greater London

Hybrid
GBP 90,000 - 120,000
Medical insurance
Pension plan
Vision and dental insurance
+3
Lead Architect, Data & AI Platforms
Lead Architect, Data & AI Platforms

wppmedia • Greater London

Hybrid
GBP 120,000 - 160,000
Hybrid work model
Medical and retirement benefits
PAM Consultant
PAM Consultant

Accenture • Greater London

On-site
GBP 60,000 - 80,000
Vacation allowance (25–30 days per yr)
Private medical insurance
Charitable leave days
Business Security Director
Business Security Director

WPP Media Limited • Greater London

Hybrid
GBP 110,000 - 170,000
Hybrid work model
Career development opportunities
Diversity and inclusion focus
Senior Technical Architect
Senior Technical Architect

Vmlenterprisesolutions • Greater London, Manchester

On-site
GBP 120,000 - 190,000
Discretionary bonus
Training opportunities
Competitive pension
+4