Principal PAM Architect

At Thales, we know technology has the ability to make our world more secure, sustainable, and inclusive – and that it’s all driven by human intelligence.

Because it takes human intelligence to build and power the systems and solutions that people depend on every day. So we stay curious and make space for diverse points of view. We share what we know and we challenge what’s possible.

From manufacturing and engineering to cybersecurity and space, we’re driving progress in some of the world’s most important industries – and working together to build a future we can all trust.

Our benefits
In addition to interesting, engaging opportunities that impact at scale, and ongoing personal and professional development opportunities, Thales Cyber can offer you:

• Competitive remuneration structure

• Hybrid and flexible working options under the Thales Flex program

• Paid parental leave and family support through Parents at Work

• The day off on your birthday each year

• Novated Lease options

• Ongoing personal and professional development opportunities

• Sonder – Wellbeing & Support Partner
 

About Thales
Thales delivers cybersecurity products and services that keep people and assets safe, giving organisations confidence in the security of their digital journeys. Our solutions are deployed in 148 countries, helping governments to maintain sovereignty, and organisations to preserve their strategic autonomy.

Thales is a global leader in cybersecurity - no.1 in data security - with 6,000+ experts and developers. We bring trust and resilience to key industries including finance, health, retail and manufacturing, as well as vital sectors such as aerospace, critical infrastructure, defence and space.

Your role
The Principal Privileged Access Management (PAM) Architect is a senior role within our Digital Identity Practice, serving as the lead subject matter expert responsible for defining and driving PAM strategy for clients. This position oversees solution design and architecture governance for complex privileged access programs, ensuring secure, scalable, and auditable implementations.

As a trusted advisor, you will build strong relationships with clients and executives, communicate value-driven privileged access solutions, and support alignment with broader identity technologies such as Ping Identity, SailPoint, Okta, and Microsoft Entra.

• Lead design and assurance of enterprise PAM solutions including credential/session management, just-in-time elevation, and access governance

• Act as a trusted advisor to senior clients, delivering strategic PAM architecture guidance and expert recommendations

• Develop scalable, secure PAM architectures and roadmaps aligned with business, operational, and regulatory requirements

• Own PAM technical design governance, ensuring consistency, quality, auditability, and compliance with organizational standards

• Serve as a subject matter expert on PAM platforms (e.g., CyberArk, Delinea, BeyondTrust, Microsoft Entra) and enable their integration within identity ecosystems

• Drive practice growth through reusable architectures, lead technical teams, support pre-sales activities, and contribute to workforce planning
 

What you’ll bring

• Minimum 5 years’ experience delivering enterprise security architecture services, focusing on PAM in regulated sectors like government, banking, utilities, or critical infrastructure

• Strong knowledge of PAM principles including least privilege, credential vaulting, session management, just-in-time access, and audit logging

• Experience translating business, risk, and compliance requirements into tailored privileged access designs and roadmaps aligned with frameworks like ISO 27001/27002, NIST, PSPF, and ISM

• Proven ability to lead client engagements, influence executives, articulate PAM strategies, and support sales activities including proposal development and solution assurance

• Relevant PAM vendor certification and experience (e.g., CyberArk, Delinea, BeyondTrust, Microsoft PIM) required; additional certifications such as CISSP, SABSA, or TOGAF are highly desirable
 

We encourage you to apply
After you have applied, you will receive an email acknowledging your application. We’ll then provide a personalised experience for suitable applicants as we progress the selection and assessment process. Prior to being offered employment, you will need to complete pre-employment police and depending on the role type, medical checks as well.

It’s easy to dismiss the perfect opportunity if you don’t see yourself as the perfect fit. If this role feels right – no matter your background or personal circumstances – please introduce yourself or join our community. We’re committed to supporting a diverse workplace, and that starts here.

We’re proud to be endorsed by WORK180 as an Employer for All Women, but we know there’s always more we can do. We’ll continue to foster industry partnerships, employee resource groups (ERGs) and development opportunities to make Thales a genuinely equitable employer, for everyone.

Read more about our WORK180 endorsement.