Architect, Privileged Access Management
Core
Designs enterprise Privileged Access Management (PAM) architecture, translating security strategy into reference designs for privileged human and non-human identities.
Role type
Senior IC Security Architect (PAM)
Builds
Enterprise PAM target-state architecture, reference implementations, and policy-as-code patterns.
Domain
Cybersecurity, Identity & Access Management, Cloud Infrastructure
Required skills
Enterprise PAM architecture design, Privileged account discovery, Vaulted credential management, Session isolation/recording, Just-in-time (JIT) access, Break-glass procedures, Endpoint privilege management, Machine/service-account controls, Identity Provider (IdP) integration, Identity Governance & Administration (IGA) integration, SIEM integration, ITSM integration, CMDB integration, Cloud platform integration, DevOps pipeline integration, Hands-on PAM platforms (CyberArk, BeyondTrust, Delinea), Policy-as-code, IAM team collaboration, Infrastructure team collaboration, Cloud team collaboration, DevOps team collaboration
Preferred skills
Non-human identity management, Secrets management, CISSP, CCSP, CISM, PAM platform certification
Technologies
CyberArk, BeyondTrust, Delinea, IdP, IGA, SIEM, ITSM, CMDB, Cloud platforms, DevOps pipelines
Responsibilities
Architect enterprise PAM target-state including discovery, vaulting, session management, JIT access, and machine controls; Integrate PAM architecture with IdP, IGA, SIEM, ITSM, CMDB, cloud platforms, and DevOps pipelines; Engineer/prototype reference implementations and policy-as-code patterns; Design sustainability and governance models for control design and exception governance.
Seniority
Senior, hands-on IC