PAM Architect
About Us
Turnkey is helping to make the world a safer place to do business. As a global consulting provider of Risk Management, Identity & Access Management (IAM), Privileged Access Management (PAM), and Cyber Security solutions, we help some of the world's largest organizations manage business risks and protect their most critical assets from internal and external threats.
We are a fast-growing and dynamic consultancy with a collaborative, professional, and entrepreneurial culture. Due to continued growth and increasing client demand, we are seeking an experienced PAM Architect to join our expanding team. This is a strategic and technical leadership role that will be instrumental in delivering complex PAM transformation initiatives and supporting Turnkey's ambitious growth plans over the coming years.
As a PAM Architect, you will work with global clients across multiple industries, leading the architecture, design, implementation, and optimization of enterprise-scale PAM programs. Projects will span advisory, architecture, assurance, managed services, and technology implementation engagements.
About the Role
The PAM Architect will serve as a trusted advisor to clients, providing strategic direction and technical leadership for Privileged Access Management initiatives. You will be responsible for designing scalable, secure, and business-aligned PAM architectures while leading technical delivery teams and engaging with senior stakeholders.
This role requires strong expertise in PAM technologies, enterprise security architecture, IAM integration, cloud security, and regulatory compliance.
The ideal candidate will possess extensive experience designing and implementing PAM solutions and will be comfortable engaging with technical teams, security leadership, and executive stakeholders.
Key Areas of Expertise
Privileged Access Management
- Enterprise PAM Architecture
- Privileged Account Lifecycle Management
- Password Vaulting & Rotation
- Privileged Session Management (PSM)
- Privileged Remote Access
- Just-In-Time (JIT) Access
- Just-Enough Administration (JEA)
- Endpoint Privilege Management (EPM)
- Secrets & Machine Identity Management
- SSH Key Management
- API Key and Service Account Management
- Privileged Threat Analytics & Risk Monitoring
Core Technologies
Primary PAM Technologies
- CyberArk
- BeyondTrust
- Delinea (Thycotic/Centrify)
Desirable Technologies
- SailPoint
- Ping Identity
- Micro Focus / NetIQ
- Okta
- Microsoft Entra ID
- Saviynt
Additional Technical Experience
- Active Directory / LDAP
- Azure, AWS, GCP
- Kubernetes & Container Security
- DevOps & CI/CD Security
- Linux & Windows Administration
- Database Security (Oracle, SQL Server, PostgreSQL)
- SIEM Integration (Splunk, Sentinel, QRadar)
- API Security & Integration
Required Experience & Qualifications
Essential
- 8+ years of experience in Identity & Access Management or Privileged Access Management.
- 5+ years of experience architecting and delivering enterprise PAM solutions.
- Proven experience designing and implementing CyberArk, BeyondTrust, or Delinea solutions in large enterprise environments.
- Strong understanding of enterprise security architecture and Zero Trust principles.
- Experience leading PAM transformation programs from assessment through production deployment.
- Hands-on experience integrating PAM platforms with:
- Active Directory
- LDAP
- Cloud platforms
- SIEM tools
- IGA solutions
- MFA platforms
- Strong understanding of privileged identity lifecycle management.
- Experience defining PAM governance, operating models, and security controls.
- Excellent stakeholder management and client-facing communication skills.
- Ability to lead technical workshops, architecture reviews, and executive presentations.
Originally posted on