PAM Lead: CyberArk & EPM Architect (Hybrid)

Hargreaves Lansdown group; West of England; Hybrid; GBP 90,000 - 120,000; Full time

Benefits offered by this job

Discretionary annual bonus

25 days holiday + bank holidays

Hybrid working

Private medical insurance

Pension scheme up to 11%

Enhanced parental leave

Health care cash plans

Job summary

Hargreaves Lansdown seeks a PAM Lead to provide technical leadership, strategic direction and SME support across Privileged Access Management. You will own the PAM roadmap, drive CyberArk Privilege Cloud and Endpoint Privilege Manager implementations, and mentor PAM engineers in a Bristol-based hybrid role.

You will collaborate with Infrastructure, Security and Risk teams to secure privileged identities, support audits and advance PAM maturity while enabling colleagues to work securely and

Qualifications

• Extensive experience in Privileged Access Management within complex enterprise environments, ideally financial services.
• Hands-on experience administering and engineering CyberArk Privilege Cloud.
• Strong experience with CyberArk Endpoint Privilege Manager (EPM).
• Experience implementing and managing secrets management solutions for applications and cloud platforms.
• Strong understanding of service accounts, machine identities and non-human identity security.
• Knowledge of Identity and Access Management concepts including authentication, authorisation, RBAC and least privilege.
• Excellent stakeholder management and ability to translate technical concepts to business language.

Responsibilities

• Act as the technical lead and primary SME for Privileged Access Management technologies, processes and controls.
• Own the technical roadmap for PAM services, aligning with security strategy and risk management.
• Lead optimisation of CyberArk Privilege Cloud and Endpoint Privilege Manager (EPM).
• Develop and maintain strategies for securing privileged accounts, machine identities and non-human identities.
• Provide technical leadership for PAM-related projects and operational initiatives.
• Mentor PAM Engineers and Analysts; support capability development and service maturity.
• Collaborate with Infrastructure, Cloud, Application Development, Security Operations and Risk teams.
• Support audits, regulatory reviews and control assessments with evidence and guidance.
• Monitor threats and industry best practices to keep PAM controls effective.
• Take responsibility for incident escalation and complex troubleshooting within PAM.

Skills

Privileged Access Management

CyberArk Privilege Cloud

Endpoint Privilege Manager (EPM)

Secrets management

Non-human identities

RBAC and least privilege

PowerShell / scripting

Stakeholder management

Automation / scripting

Tools

CyberArk Privilege Cloud

Endpoint Privilege Manager (EPM)

Active Directory

Entra ID

Windows Server

Linux

PowerShell

Job description

Hargreaves Lansdown seeks a PAM Lead to provide technical leadership, strategic direction and SME support across Privileged Access Management. You will own the PAM roadmap, drive CyberArk Privilege Cloud and Endpoint Privilege Manager implementations, and mentor PAM engineers in a Bristol-based hybrid role.

You will collaborate with Infrastructure, Security and Risk teams to secure privileged identities, support audits and advance PAM maturity while enabling colleagues to work securely and