PAM Architect

Turnkey Consulting; United States; Remote; USD 140,000 - 210,000; Full time

Job summary

Turnkey Consulting is seeking a PAM Architect to lead enterprise PAM architecture engagements for global clients. You will design secure PAM programs, guide technical delivery teams, and interact with senior stakeholders to align PAM strategies with business objectives.

Ideal candidates have extensive PAM experience across CyberArk, BeyondTrust, or Delinea, plus strong knowledge of zero-trust security, cloud integration, and IAM governance.

Qualifications

• 8+ years of Identity & Access Management or Privileged Access Management experience.

Responsibilities

• Design scalable PAM architectures aligned with business goals.

Skills

IAM/PAM experience

PAM architecture

CyberArk

BeyondTrust

Delinea

Zero Trust

Stakeholder management

Executive communications

Workshops & reviews

Cloud integration

SIEM integration

IGA solutions

MFA platforms

Tools

CyberArk

BeyondTrust

Delinea

Job description

About Us

Turnkey is helping to make the world a safer place to do business. As a global consulting provider of Risk Management, Identity & Access Management (IAM), Privileged Access Management (PAM), and Cyber Security solutions, we help some of the world's largest organizations manage business risks and protect their most critical assets from internal and external threats.

We are a fast-growing and dynamic consultancy with a collaborative, professional, and entrepreneurial culture. Due to continued growth and increasing client demand, we are seeking an experienced PAM Architect to join our expanding team. This is a strategic and technical leadership role that will be instrumental in delivering complex PAM transformation initiatives and supporting Turnkey's ambitious growth plans over the coming years.

As a PAM Architect, you will work with global clients across multiple industries, leading the architecture, design, implementation, and optimization of enterprise-scale PAM programs. Projects will span advisory, architecture, assurance, managed services, and technology implementation engagements.

About the Role

The PAM Architect will serve as a trusted advisor to clients, providing strategic direction and technical leadership for Privileged Access Management initiatives. You will be responsible for designing scalable, secure, and business-aligned PAM architectures while leading technical delivery teams and engaging with senior stakeholders.

This role requires strong expertise in PAM technologies, enterprise security architecture, IAM integration, cloud security, and regulatory compliance.

The ideal candidate will possess extensive experience designing and implementing PAM solutions and will be comfortable engaging with technical teams, security leadership, and executive stakeholders.

Key Areas of Expertise

Privileged Access Management

• Enterprise PAM Architecture
• Privileged Account Lifecycle Management
• Password Vaulting & Rotation
• Privileged Session Management (PSM)
• Privileged Remote Access
• Just-In-Time (JIT) Access
• Just-Enough Administration (JEA)
• Endpoint Privilege Management (EPM)
• Secrets & Machine Identity Management
• SSH Key Management
• API Key and Service Account Management
• Privileged Threat Analytics & Risk Monitoring

Core Technologies

Primary PAM Technologies

• CyberArk
• BeyondTrust
• Delinea (Thycotic/Centrify)

Desirable Technologies

• SailPoint
• Ping Identity
• Micro Focus / NetIQ
• Okta
• Microsoft Entra ID
• Saviynt

Additional Technical Experience

• Active Directory / LDAP
• Azure, AWS, GCP
• Kubernetes & Container Security
• DevOps & CI/CD Security
• Linux & Windows Administration
• Database Security (Oracle, SQL Server, PostgreSQL)
• SIEM Integration (Splunk, Sentinel, QRadar)
• API Security & Integration

Required Experience & Qualifications

Essential

• 8+ years of experience in Identity & Access Management or Privileged Access Management.

• 5+ years of experience architecting and delivering enterprise PAM solutions.

• Proven experience designing and implementing CyberArk, BeyondTrust, or Delinea solutions in large enterprise environments.

• Strong understanding of enterprise security architecture and Zero Trust principles.

• Experience leading PAM transformation programs from assessment through production deployment.

• Hands-on experience integrating PAM platforms with:

  • Active Directory
  • LDAP
  • Cloud platforms
  • SIEM tools
  • IGA solutions
  • MFA platforms

• Strong understanding of privileged identity lifecycle management.

• Experience defining PAM governance, operating models, and security controls.

• Excellent stakeholder management and client-facing communication skills.

• Ability to lead technical workshops, architecture reviews, and executive presentations.