Privileged Access Management Architect

JLR Search Ltd; Tadworth; On-site; GBP 80,000 - 85,000; Full time

Job summary

JLR Search Ltd in the United Kingdom is seeking a Senior Privileged Access Management Architect to own enterprise PAM strategy across a hybrid estate. You will define target architecture, standards, and a roadmap for privileged access, balancing security with usability for administrators.

This role requires CyberArk expertise, strong AD and Entra ID foundations, and experience with AWS/Azure, Cloud and Terraform.

Qualifications

• Ownership of enterprise PAM architecture with a target state, not only operating a platform.
• CyberArk architecture and deployment experience, including self-hosted or Privilege Cloud, with oversight.
• CyberArk Sentry certification or higher, with hands-on deployment evidence.
• Strong AD and Microsoft Entra ID foundations with practical AWS and Azure exposure.
• Experience in regulated or high-consequence environments including risk, audit and evidence management.
• Ability to influence senior stakeholders and get designs adopted.
• Financial services background.
• Desirable: CyberArk Guardian, CISSP, CCSP, or SC-300 certification.
• Desirable: Privilege Cloud migration, secrets management, non-human identity, endpoint privilege management, cloud-native just-in-time access.
• Automation experience using PowerShell, APIs, or Terraform.

Responsibilities

• Define our privileged access target architecture, including principles, standards, reference designs, and a roadmap to achieve them.
• Embed privileged access controls across on-premises infrastructure, AWS, Azure, and SaaS environments.
• Oversee implementations and provide design assurance without owning day-to-day operations.
• Align privileged access with Zero Trust and the wider enterprise identity strategy.
• Balance security and usability so administrators can work effectively while staying protected.
• Influence Security, Cloud, Infrastructure and Risk stakeholders to adopt designs without relying on positional authority.

Skills

CyberArk

PAM architecture

Active Directory

Entra ID

AWS

Azure

PowerShell

Sentry

Terraform

APIs

Tools

Terraform

PowerShell

AWS

Azure

Job description

Salary: £80,000 - 85,000 per year

Requirements

• Enterprise PAM architecture ownership, with direct experience defining a target state rather than only operating a platform
• CyberArk architecture and deployment experience, including self-hosted or Privilege Cloud, with implementation oversight
• CyberArk Sentry certification or higher, supported by hands-on deployment evidence
• Strong Active Directory and Microsoft Entra ID foundations, with practical AWS and Azure exposure
• Experience in regulated or high-consequence environments, including risk, audit, and evidence management
• Strong senior stakeholder influence and the ability to get designs adopted, not just approved
• Financial services background
• CyberArk Guardian, CISSP, CCSP, or SC-300 certification desirable
• Privilege Cloud migration experience desirable
• Experience with secrets management and non-human identity desirable
• Experience with endpoint privilege management desirable
• Experience with cloud-native just-in-time access desirable
• Automation experience using PowerShell, APIs, or Terraform desirable

Responsibilities

• Define our privileged access target architecture, including principles, standards, reference designs, and the roadmap to achieve them
• Embed privileged access controls consistently across our on-premises infrastructure, AWS, Azure, and SaaS environments
• Oversee implementations and provide design assurance without owning day-to-day operations
• Align privileged access with Zero Trust and our wider enterprise identity strategy
• Balance security and usability so our administrators can work effectively while remaining protected
• Influence Security, Cloud, Infrastructure, and Risk stakeholders to adopt our designs without relying on positional authority

Technologies

• AWS
• Active Directory
• Architect
• Azure
• Cloud
• PowerShell
• Security
• Sentry
• Terraform

More

We are a growing global financial services business offering an exciting opportunity for a Privileged Access Management Architect or Lead Cyber Engineer to step up and shape our privileged access strategy across a hybrid estate. In this role, we focus on reducing the risk associated with privileged human, administrative, and service identities while working across Security, Cloud, Infrastructure, and Risk to deliver practical, secure, and usable designs.

last updated 33 week of 2026