PAM Architect

Turnkey Consulting; Kuala Lumpur; On-site; MYR 180,000 - 260,000; Full time

Job summary

Turnkey Consulting Malaysia Sdn Bhd is seeking an experienced PAM Architect to lead architecture, design, and delivery of enterprise-grade Privileged Access Management programs across global clients.

You will guide technical delivery teams, engage senior stakeholders, and ensure alignment with Zero Trust and compliance requirements.

Qualifications

• 8+ years of experience in Identity & Access Management or Privileged Access Management.
• 5+ years of experience architecting and delivering enterprise PAM solutions.
• Proven experience designing and implementing CyberArk, BeyondTrust, or Delinea solutions in large enterprise environments.
• Strong understanding of enterprise security architecture and Zero Trust principles.
• Experience leading PAM transformation programs from assessment through production deployment.
• Hands-on experience integrating PAM platforms with Active Directory, LDAP, Cloud platforms, SIEM tools, IGA solutions, MFA platforms.

Responsibilities

• Lead PAM architecture and delivery for enterprise customers across multiple industries.
• Design scalable, secure PAM architectures aligned with business goals.
• Engage with senior stakeholders and guide technical delivery teams.
• Drive PAM transformation programs from assessment to production deployment.

Skills

IAM experience

PAM experience

Architecture leadership

Stakeholder management

Tools

CyberArk

BeyondTrust

Delinea (Thycott/Centrify)

SailPoint

Microsoft Entra ID

Job description

About Us

Turnkey is helping to make the world a safer place to do business. As a global consulting provider of Risk Management, Identity & Access Management (IAM), Privileged Access Management (PAM), and Cyber Security solutions, we help some of the world's largest organizations manage business risks and protect their most critical assets from internal and external threats.

We are a fast-growing and dynamic consultancy with a collaborative, professional, and entrepreneurial culture. Due to continued growth and increasing client demand, we are seeking an experienced PAM Architect to join our expanding team. This is a strategic and technical leadership role that will be instrumental in delivering complex PAM transformation initiatives and supporting Turnkey's ambitious growth plans over the coming years.

As a PAM Architect, you will work with global clients across multiple industries, leading the architecture, design, implementation, and optimization of enterprise-scale PAM programs. Projects will span advisory, architecture, assurance, managed services, and technology implementation engagements.

About the Role

The PAM Architect will serve as a trusted advisor to clients, providing strategic direction and technical leadership for Privileged Access Management initiatives. You will be responsible for designing scalable, secure, and business-aligned PAM architectures while leading technical delivery teams and engaging with senior stakeholders.

This role requires strong expertise in PAM technologies, enterprise security architecture, IAM integration, cloud security, and regulatory compliance.

The ideal candidate will possess extensive experience designing and implementing PAM solutions and will be comfortable engaging with technical teams, security leadership, and executive stakeholders.

Key Areas of Expertise

Privileged Access Management

• Enterprise PAM Architecture


• Privileged Account Lifecycle Management


• Password Vaulting & Rotation


• Privileged Session Management (PSM)


• Privileged Remote Access


• Just-In-Time (JIT) Access


• Just-Enough Administration (JEA)


• Endpoint Privilege Management (EPM)


• Secrets & Machine Identity Management


• SSH Key Management


• API Key and Service Account Management


• Privileged Threat Analytics & Risk Monitoring

Core Technologies

Primary PAM Technologies

• CyberArk


• BeyondTrust


• Delinea (Thycotic/Centrify)

Desirable Technologies

• SailPoint


• Ping Identity


• Micro Focus / NetIQ


• Okta


• Microsoft Entra ID


• Saviynt

Additional Technical Experience

• Active Directory / LDAP


• Azure, AWS, GCP


• Kubernetes & Container Security


• DevOps & CI/CD Security


• Linux & Windows Administration


• Database Security (Oracle, SQL Server, PostgreSQL)


• SIEM Integration (Splunk, Sentinel, QRadar)


• API Security & Integration

Required Experience & Qualifications

Essential

• 8+ years of experience in Identity & Access Management or Privileged Access Management.


• 5+ years of experience architecting and delivering enterprise PAM solutions.


• Proven experience designing and implementing CyberArk, BeyondTrust, or Delinea solutions in large enterprise environments.


• Strong understanding of enterprise security architecture and Zero Trust principles.


• Experience leading PAM transformation programs from assessment through production deployment.


• Hands-on experience integrating PAM platforms with:
  
  
  
  • Active Directory
  
  
  • LDAP
  
  
  • Cloud platforms
  
  
  • SIEM tools
  
  
  • IGA solutions
  
  
  • MFA platforms
  
  
  
  


• Strong understanding of privileged identity lifecycle management.


• Experience defining PAM governance, operating models, and security controls.


• Excellent stakeholder management and client-facing communication skills.


• Ability to lead technical workshops, architecture reviews, and executive presentations.