Key Responsibilities
* Set the target architecture — principles, standards, reference designs and the roadmap to reach them
* Embed privileged access controls consistently across on-premises infrastructure, AWS, Azure and SaaS
* Oversee implementations and provide design assurance, without owning day-to-day operations
* Align privileged access to Zero Trust and the wider enterprise identity strategy
* Balance security against usability — controls administrators can't live with don't survive
* Carry designs through Security, Cloud, Infrastructure and Risk without positional authority.
Key Skills / Experience
* Enterprise PAM architecture ownership — you personally defined a target state, not just ran the platform
* CyberArk architecture and deployment experience, self-hosted or Privilege Cloud, with implementation oversight
* CyberArk Sentry certification or higher, backed by hands-on deployment evidence
* Strong Active Directory and Microsoft Entra ID foundations, with real AWS and Azure exposure
* Regulated or high-consequence control experience — risk, audit, evidence
* Senior stakeholder influence: the ability to get a design adopted, not just approved
* Financial services background,
* CyberArk Guardian, CISSP / CCSP / SC-300,
* Privilege Cloud migration,
* secrets management and non-human identity,
* endpoint privilege management,
* cloud-native just-in-time access,
* automation via PowerShell, APIs or Terraform
Salary description
£80000.00 - £85000.00 per year