Solution Architect - PAM/PAW

• Own the end-to-end PAM / PAW solution architecture for the assigned workstream.
• Define the target-state architecture, including integration with identity platforms, network systems, access controls, monitoring, and operational tooling.
• Assess current-state privileged access processes and identify gaps, risks, and required changes.
• Translate business, security, operational, and compliance requirements into a practical solution architecture.
• Work closely with security, network, infrastructure, operations, and application teams to ensure architectural alignment.
• Define architecture principles, design patterns, security controls, and implementation guardrails.
• Support decision-making around PAM tooling, PAW standards, access models, and integration approaches.
• Ensure the solution supports audit, regulatory, and governance requirements.
• Identify architectural risks, dependencies, and constraints, and propose mitigation options.
• Provide technical leadership to designers, engineers, PMs, BAs, and delivery teams.
• Produce and maintain key architecture artefacts, including high-level designs, architecture diagrams, options papers, and decision records.
• Present solution options, recommendations, and risks to senior stakeholders and governance boards.
• Ensure the solution is fit for transition into BAU operations.

• Strong experience as a Solution Architect in security, identity, network, or infrastructure programmes.
• Good understanding of Privileged Access Management concepts, including privileged accounts, session management, credential vaulting, least privilege, access approval workflows, and audit logging.
• Good understanding of Privileged Access Workstation concepts, including hardened workstations, admin tiers, secure access models, and separation of privileged and standard user activities.
• Experience working in complex enterprise or telecom environments.
• Strong understanding of network environments, operational support models, and security governance.
• Ability to convert complex security and operational requirements into practical solution designs.
• Experience working with senior stakeholders, architecture review boards, cyber security teams, and operations teams.
• Ability to take ownership, drive decisions, and remove ambiguity.

• Experience with PAM tools such as CyberArk, BeyondTrust, Delinea, or similar.
• Experience with Microsoft security technologies, Active Directory, Entra ID, conditional access, device hardening, or endpoint management.
• Experience in Solution Architecture, separation, migration, divestment, or integration programmes.
• Knowledge of telecom network operations and privileged access controls.

• Approved PAM / PAW target architecture.
• Clear architecture decisions and design principles.
• Identified risks, dependencies, and mitigation plans.
• Architecture aligned with company security and operational standards.
• Solution ready for detailed design, delivery, and operational handover.

Disclaimer:

This vacancy is being advertised by either Advanced Resource Managers Limited, Advanced Resource Managers IT Limited or Advanced Resource Managers Engineering Limited ("ARM"). ARM is a specialist talent acquisition and management consultancy. We provide technical contingency recruitment and a portfolio of more complex resource solutions. Our specialist recruitment divisions cover the entire technical arena, including some of the most economically and strategically important industries in the UK and the world today. We will never send your CV without your permission. Where the role is marked as Outside IR35 in the advertisement this is subject to receipt of a final Status Determination Statement from the end Client and may be subject to change.