About the Opportunity

Job Type: Permanent

Application Deadline: 23 July 2026

Title                 Privileged Access Management (PAM) Architect

Department     Enterprise Identity

Location          UK

Reports To      Enterprise Identity Director

Level                5

We’re proud to have been helping our clients build better financial futures for over 50 years. How have we achieved this? By working together—and supporting each other—all over the world. So, join our team and feel like you’re part of something bigger.

Our clients come from all walks of life and so do we. We are proud of our inclusive culture and encourage applications from the widest mix of talent, whatever your age, gender, ethnicity, sexual orientation, gender identity, social background and more.

As a flexible employer, we trust our people to perform their role in the way that works best for them, our clients and our business. We are a disability-friendly company and would welcome a conversation with you if you feel you might benefit from any reasonable adjustments during the recruitment process and beyond.

About your team

The Enterprise Identity team defines and delivers identity and access capabilities that protect the organisation from cyber risk while enabling secure, seamless access across business services and platforms.

About your role
As a Privileged Access Management (PAM) Architect, you will define and lead the organisation’s PAM strategy, architecture, and solution designs to reduce cyber risk associated with privileged identities. You will act as the subject-matter expert, providing architectural leadership across PAM platforms, integrations, and operating models.

Working closely with security, infrastructure, cloud, and risk stakeholders, you will ensure PAM controls are consistently embedded across on-premises, cloud, and SaaS environments. The role combines strategic direction with hands-on architectural design, balancing security, usability, and operational efficiency. You will also provide oversight for PAM implementations and ensure alignment with Zero Trust and enterprise identity strategies.

About you

You are an experienced identity security architect with strong expertise in Privileged Access Management and proven experience designing enterprise-scale PAM solutions. You have hands-on architectural experience with CyberArk (self-hosted or SaaS) or similar platforms, and a strong understanding of Active Directory, Entra ID, and cloud environments such as AWS and Azure. You have qualification in Cyberark, at least Sentry level.

You take a pragmatic, structured approach and can confidently influence stakeholders while bridging strategy and detailed technical design.

Feel rewarded

For starters, we’ll offer you a comprehensive benefits package. We’ll value your wellbeing and support your development. And we’ll be as flexible as we can about where and when you work—finding a balance that works for all of us. It’s all part of our commitment to making you feel motivated by the work you do and happy to be part of our team.

For more about our work, our approach to dynamic working, and how you could build your future here, visit careers.fidelityinternational.com.

As an international financial services organisation, we are in-scope of international regulations in the way that we carry out our work. This position is involved in work that is regulated by the FCA and/or PRA, and their Individual Conduct Rules (COCON) apply. Training will be provided.

For more about our work, our approach to dynamic working and how you could build your future here, visit careers.fidelityinternational.com.

As an international financial services organisation, we are in-scope of international regulations in the way that we carry out our work. This position is involved in work that is regulated by the FCA and/or the PRA and their Individual Conduct Rules (COCON) apply to it, along with any other regulation. We provide training on COCON and how it affects our employees. More information about COCON can be found in the Employment Handbook.