PAM Senior Engineer / Architect (Privileged Access Management)

About Us

Turnkey Consulting is an independent risk and security consultancy that brings together people protection and performance to help organisations achieve Digital Enterprise Resilience. For more than 20 years Turnkey has enabled the world’s leading companies to understand and optimise their risk and security landscape through assessment-based road mapping, organisational empowerment and expert application of market-leading technologies. Turnkey is headquartered in London with offices across Asia, Australia, Europe and North America.

The Opportunity

We are looking for a Senior PAM Engineer or Architect with strong experience in Privileged Access Management (PAM) to join our Identity & Access Management practice. You will play a leading role in delivering and optimising PAM solutions for our clients working across the full project lifecycle and engaging with stakeholders at all levels. We welcome applications from individuals with a proven track record in implementing PAM solutions particularly those with expertise in Delinea CyberArk or BeyondTrust. Experience with IGA (especially SailPoint or similar technologies) is highly advantageous as is exposure to broader identity and authentication technologies. Your skills and experience will be assessed against the requirements of the role and we offer two grades: Senior Engineer and Architect. The Architect grade includes additional responsibilities around technical leadership, solution design and commercial/project management.

Key Responsibilities

• Lead or contribute to the design, configuration and deployment of PAM solutions (SaaS cloud and on-prem) ensuring alignment with business security and compliance requirements.
• Implement and optimise privileged access controls including credential vaulting, session management and monitoring.
• Integrate PAM platforms with enterprise systems (Active Directory, Entra, LDAP, HR systems, ServiceNow, etc.).
• Support authentication and access management initiatives including SSO, MFA and passwordless authentication.
• Collaborate with clients to gather requirements, facilitate workshops and translate business needs into actionable technical solutions.
• Produce high‑quality technical documentation, configuration guides and process documentation.
• Provide technical leadership and mentoring to junior team members.
• Troubleshoot and resolve complex PAM and IAM issues ensuring smooth project delivery.
• Stay current with industry trends, best practices and emerging technologies in PAM and IAM.

Additional Responsibilities for Architect Grade

• Own the end‑to‑end technical design and architecture of PAM solutions ensuring scalability, security and future‑proofing.
• Deliver high‑ and low‑level solution designs, technical roadmaps and transition plans.
• Lead technical discussions with clients, stakeholders and delivery teams acting as a subject matter expert.
• Oversee project delivery, manage commercial outcomes and contribute to project management activities.
• Drive continuous improvement in solution delivery, process optimisation and client outcomes.
• Represent Turnkey in client engagements, industry events and thought‑leadership initiatives.

Core Skills & Experience

Senior Engineer

• 35 years of experience delivering PAM solutions with a strong focus on Delinea CyberArk, BeyondTrust or similar platforms.
• Hands‑on experience with privileged account lifecycle management, credential vaulting, session monitoring and access reviews.
• Strong understanding of authentication protocols and technologies (SSO, MFA, Entra, Azure AD, LDAP, SAML, OAuth).
• Experience integrating PAM platforms with HR systems, ServiceNow and other enterprise applications.
• Proficiency in scripting (PowerShell, JavaScript, BeanShell) and API integration (REST, SCIM, JDBC).
• Excellent communication and stakeholder management skills with the ability to explain complex technical concepts to non‑technical audiences.
• Consulting mindset with experience gathering and analysing business requirements and translating them into technical solutions.
• Experience producing high‑quality deliverables and documentation.
• Proactive, self‑driven and collaborative approach to problem solving and project delivery.

Architect

• 5 years of experience delivering PAM solutions with deep expertise in Delinea CyberArk, BeyondTrust and broader IAM technologies.
• Demonstrated experience in technical leadership, solution architecture and end‑to‑end project delivery.
• Proven ability to design scalable, secure and future‑proof PAM solutions for complex enterprise environments.
• Experience managing commercial outcomes and contributing to project management activities.

Desirable Skills

• Experience with IGA solutions (SailPoint or similar technologies).
• Product certifications in PAM or IGA platforms.
• Experience with cloud identity systems (Entra AD, Okta, GCP, AWS IAM).
• Familiarity with regulatory frameworks and audit requirements.
• Project management or commercial experience (for Architect grade).
• Experience in professional services consulting, ideally with Big‑4 or similar.

Why Join Turnkey

• Work in a rapidly growing consulting firm that delivers leading‑edge technologies and works with high‑profile clients.
• Be part of a flexible, supportive and collaborative team.
• Enjoy a culture that values diversity, inclusion and continuous learning.
• Access to training, certifications and career development opportunities.
• Make a real impact in a company that values your ideas and expertise.

Application Process

We assess every applicant’s skills and experience against the requirements of the role and will consider you for either the Senior Engineer or Architect grade depending on your background and aspirations.

Salary

Competitive base salary depending on a combination of factors including level of experience and expertise in addition to an OTE bonus.

Benefits

• Pension: on joining employees will be automatically enrolled in our workplace pension scheme.
• Holiday Entitlement: employees receive 25 days per holiday year plus all statutory bank and public holidays in England and Wales.
• Private Medical Insurance: employees will be enrolled on to the company BUPA healthcare scheme.
• Insurances: Life Insurance and Critical Illness cover are provided to all employees.
• Carbon Offset: Employees will be enrolled onto the company carbon offset scheme which is committed to offsetting at least 50% of all employee personal carbon emissions. All Turnkey employees are entitled to 40 worth of carbon credits each year which can offset 7 tonnes of carbon. Options are available to increase carbon credit amounts which would be treated as a benefit in kind.

Location

Based in our London office (preferred) with hybrid working.

#J-18808-Ljbffr