PAM Architect — Zero-Trust Privileged Access Lead

WPP Media Limited; Greater London; Hybrid; GBP 100,000 - 150,000; Full time

Job summary

WPP Media Limited is seeking a senior PAM architect to define and govern privileged-access architecture for the global estate. The role focuses on architecture standards, vaulting, session control and least-privilege, working with partners to ensure secure designs and adherence to WPP security policies.

You will influence platform direction, provide design authority, and drive onboarding patterns and guardrails across infrastructure and applications while keeping engineering stakeholders aligned

Qualifications

• Expert PAM architecture and privileged-access design.
• Knowledge of vaulting, session management and just-in-time access.
• Security architecture and compliance frameworks.
• Integration design across infrastructure and applications.
• Design-authority and documentation experience.

Responsibilities

• Design the PAM architecture, controls model and onboarding patterns.
• Set standards for privileged-account discovery, vaulting and session control.
• Assure partner-delivered PAM designs and changes.
• Embed least-privilege and zero-trust principles.
• Advise the product owner on platform direction.
• Set the architecture, patterns and guardrails that Kyndryl implements and operates within.
• Assure that partner-delivered designs and changes meet WPP security, resilience and standards.
• Act as design authority and approval gate for partner architecture decisions.

Skills

PAM architecture

Privileged-access design

Beyond Trust knowledge

Security architecture

Documentation & design authority

Education

Degree in a relevant discipline or equivalent experience

TOGAF or vendor architect tracks

Tools

Beyond Trust

Job description

WPP Media Limited is seeking a senior PAM architect to define and govern privileged-access architecture for the global estate. The role focuses on architecture standards, vaulting, session control and least-privilege, working with partners to ensure secure designs and adherence to WPP security policies.

You will influence platform direction, provide design authority, and drive onboarding patterns and guardrails across infrastructure and applications while keeping engineering stakeholders aligned