Design jobs in United Kingdom

Turnkey Consulting is an independent risk and security consultancy that brings together people, protection, and performance to help organisations achieve Digital Enterprise Resilience. For more than 20 years, Turnkey has enabled the world’s leading companies to understand and optimise their risk and security landscape through assessment-based road mapping, organisational empowerment, and expert application of market-leading technologies. Turnkey is headquartered in London with offices across Asia, Australia, Europe, and North America.

We are looking for a Senior PAM Engineer or Architect with strong experience in Privileged Access Management (PAM) to join our Identity & Access Management practice. You will play a leading role in delivering and optimising PAM solutions for our clients, working across the full project lifecycle and engaging with stakeholders at all levels.

We welcome applications from individuals with a proven track record in implementing PAM solutions, particularly those with expertise in Delinea, CyberArk, or BeyondTrust. Experience with IGA (especially SailPoint or similar technologies) is highly advantageous, as is exposure to broader identity and authentication technologies.

Your skills and experience will be assessed against the requirements of the role, and we offer two grades: Senior Engineer and Architect. The Architect grade includes additional responsibilities around technical leadership, solution design, and commercial/project management.

For both grades (Senior Engineer & Architect):

• Lead or contribute to the design, configuration, and deployment of PAM solutions (SaaS, cloud, and on-prem), ensuring alignment with business, security, and compliance requirements.
• Implement and optimise privileged access controls, including credential vaulting, session management, and monitoring.
• Integrate PAM platforms with enterprise systems (Active Directory, Entra, LDAP, HR systems, ServiceNow, etc.).
• Support authentication and access management initiatives, including SSO, MFA, and passwordless authentication.
• Collaborate with clients to gather requirements, facilitate workshops, and translate business needs into actionable technical solutions.
• Produce high-quality technical documentation, configuration guides, and process documentation.
• Provide technical leadership and mentoring to junior team members.
• Troubleshoot and resolve complex PAM and IAM issues, ensuring smooth project delivery.
• Stay current with industry trends, best practices, and emerging technologies in PAM and IAM.

Additional responsibilities for Architect Grade:

• Own the end-to-end technical design and architecture of PAM solutions, ensuring scalability, security, and future‑proofing.
• Deliver high‑ and low‑level solution designs, technical roadmaps, and transition plans.
• Lead technical discussions with clients, stakeholders, and delivery teams, acting as a subject matter expert.
• Oversee project delivery, manage commercial outcomes, and contribute to project management activities.
• Drive continuous improvement in solution delivery, process optimisation, and client outcomes.
• Represent Turnkey in client engagements, industry events, and thought leadership initiatives.

• 3–5 years’ experience delivering PAM solutions, with a strong focus on Delinea, CyberArk, BeyondTrust, or similar platforms.
• Hands‑on experience with privileged account lifecycle management, credential vaulting, session monitoring, and access reviews.
• Strong understanding of authentication protocols and technologies (SSO, MFA, Entra, Azure AD, LDAP, SAML, OAuth).
• Experience integrating PAM platforms with HR systems, ServiceNow, and other enterprise applications.
• Proficiency in scripting (PowerShell, JavaScript, BeanShell) and API integration (REST, SCIM, JDBC).
• Excellent communication and stakeholder management skills, with the ability to explain complex technical concepts to non‑technical audiences.
• Consulting mindset, with experience gathering and analysing business requirements and translating them into technical solutions.
• Experience producing high‑quality deliverables and documentation.
• Proactive, self‑driven, and collaborative approach to problem‑solving and project delivery.

• 5+ years’ experience delivering PAM solutions, with deep expertise in Delinea, CyberArk, BeyondTrust, and broader IAM technologies.
• Demonstrated experience in technical leadership, solution architecture, and end‑to‑end project delivery.
• Proven ability to design scalable, secure, and future‑proof PAM solutions for complex enterprise environments.
• Experience managing commercial outcomes and contributing to project management activities.

• Experience with IGA solutions (SailPoint or similar technologies).
• Product certifications in PAM or IGA platforms.
• Experience with cloud identity systems (Entra AD, Okta, GCP, AWS IAM).
• Familiarity with regulatory frameworks and audit requirements.
• Project management or commercial experience (for Architect grade).
• Experience in professional services consulting, ideally with Big‑4 or similar.

• Work in a rapidly growing consulting firm, that delivers leading‑edge technologies and works with high‑profile clients.
• Be part of a flexible, supportive, and collaborative team.
• Enjoy a culture that values diversity, inclusion, and continuous learning.
• Access to training, certifications, and career development opportunities.
• Make a real impact in a company that values your ideas and expertise.

We assess every applicant’s skills and experience against the requirements of the role and will consider you for either the Senior Engineer or Architect grade, depending on your background and aspirations.

Competitive base salary depending on a combination of factors including level of experience and expertise, in addition to an OTE bonus.

• Pension: on joining, employees will be automatically enrolled in our workplace pension scheme
• Holiday Entitlement: employees receive 25 days per holiday year plus all statutory bank and public holidays in England and Wales
• Private Medical Insurance: employees will be enrolled on to the company BUPA healthcare scheme
• Insurances: Life Insurance and Critical Illness cover are provided to all employees
• Carbon Offset: Employees will be enrolled onto the company carbon offset scheme which is committed to offsetting at least 50% of all employee personal carbon emissions. All Turnkey employees are entitled to £40 worth of carbon credits each year, which can offset 7 tonnes of carbon. Options are available to increase carbon credit amounts which would be treated as a benefit in kind.

Based in our London office (preferred), with hybrid working.