PAM Architect

WPP is the trusted growth partner for the world’s leading brands.

We unite cutting-edge media intelligence and data solutions, world-class creativity, next-generation production, transformative enterprise solutions and expert strategic counsel in a single company – powered by exceptional talent and our agentic marketing platform, WPP Open, to help our clients navigate change, capture opportunity and deliver transformational growth.

We work with the world's most valuable brands and have global reach across 100+ markets, with deep local expertise.

Our people are the key to our success. We're committed to fostering a culture of creativity, belonging and continuous learning, attracting and developing the brightest talent, and providing exciting career opportunities that help our people grow.

For more information, visit

WPP Enterprise Technology provides Technology services for WPP, the world’s largest communications services group. As a creative transformation company, WPP is helping its clients transform the future through extraordinary work. WPP ET is an integral part of that journey, and we are proud to provide technology for some of the world’s most creative brands.

Define the PAM target architecture and controls model, ensuring privileged access is secured by design across the global estate. A retained architecture role setting standards for Kyndryl and engineers.

• Design the PAM architecture, controls model and onboarding patterns.
• Set standards for privileged-account discovery, vaulting and session control.
• Assure partner-delivered PAM designs and changes.
• Embed least-privilege and zero-trust principles.
• Advise the product owner on platform direction.
• Set the architecture, patterns and guardrails that Kyndryl implements and operates within.
• Assure that partner-delivered designs and changes meet WPP security, resilience and standards.
• Act as design authority and approval gate for partner architecture decisions.

• Expert PAM architecture and privileged-access design.
• Expert Beyond Trust product knowledge
• Knowledge of vaulting, session management and just-in-time access.
• Security architecture and compliance frameworks.
• Integration design across infrastructure and applications.
• Design-authority and documentation experience.
• Recognised architecture experience in the relevant domain at enterprise scale.
• Relevant architecture or platform certifications (e.g. TOGAF or vendor architect tracks).
• Degree in a relevant discipline or equivalent experience.
• Sets the target architecture, standards and design patterns for the domain.
• Designs for security, scale, resilience and total cost of ownership.
• Influences engineering and vendor teams without direct authority.
• Balances strategic ambition with pragmatic, deliverable decisions.
• Stays current with platform direction and emerging capability.

You're open: We are inclusive and collaborative; we encourage the free exchange of ideas; we respect and celebrate diverse views. We are open-minded: to new ideas, new partnerships, new ways of working.

You're optimistic: We believe in the power of creativity, technology and talent to create brighter futures or our people, our clients and our communities. We approach all that we do with conviction: to try the new and to seek the unexpected.

You're extraordinary: we are stronger together: through collaboration we achieve the amazing. We are creative leaders and pioneers of our industry; we provide extraordinary every day.

Passionate, inspired people – We aim to create a culture in which people can do extraordinary work.

Scale and opportunity – We offer the opportunity to create, influence and complete projects at a scale that is unparalleled in the industry.

Challenging…