Solution Designer - PAM/PAW
6 Months
Hybrid/London - 2 days per week on site
(Apply online only) per day (Inside IR35)
My client in the telecommunications sector are looking for a Designer to join their fast-paced team on an initial 6 month contract.
The selected candidate MUST HAVE Privileged Access Management/Privileged Access Workstations design experience
The Solution Designer will be responsible for developing detailed designs for the PAM and PAW solution based on the approved architecture. The role will convert high-level architecture into implementable designs, ensuring that the solution can be built, tested, deployed, and supported effectively.
Key Responsibilities
- Produce detailed technical designs for PAM and PAW implementation.
- Translate architecture principles and requirements into build-ready design specifications.
- Define user access flows, privileged account onboarding models, workstation access patterns, and integration requirements.
- Design PAM onboarding processes for privileged accounts, network devices, platforms, and administrative users.
- Define PAW configuration requirements, including device hardening, access restrictions, connectivity, monitoring, and support processes.
- Work with network, security, infrastructure, endpoint, identity, and operations teams to validate the design.
- Identify design-level risks, gaps, assumptions, and dependencies.
- Support engineers and implementation teams during build, test, and deployment.
- Ensure designs include operational considerations such as support model, monitoring, logging, incident handling, and access review.
- Produce detailed design documents, interface specifications, workflow diagrams, and configuration guides.
- Support test planning, defect resolution, and design clarification during implementation.
- Ensure the design is compliant with security policies, audit requirements, and regulatory expectations.
Required Skills and Experience
- Strong technical design experience in security, identity, infrastructure, or network environments.
- Practical understanding of PAM and PAW concepts and implementation considerations.
- Experience designing secure access solutions for privileged users and administrators.
- Understanding of network access, firewall rules, remote access, jump servers, hardened workstations, and administrative access paths.
- Ability to produce clear, detailed, and implementation-ready technical documentation.
- Experience working with architects, engineers, testers, PMs, BAs, and operations teams.
- Strong problem-solving skills and ability to work through complex technical dependencies.
- Ability to take ownership of design deliverables and drive them through review and approval.
Desirable Skills
- Experience with PAM platforms such as CyberArk, BeyondTrust, Delinea, or similar.
- Experience with endpoint security, device hardening, Active Directory, Entra ID, Intune, SCCM, or similar tooling.
- Experience in telecom, managed services, or large enterprise security programmes.
- Experience with TSA, migration, separation, or transformation programmes.
Expected Outcomes
- Approved low-level designs and detailed design documents.
- Clear implementation guidance for PAM and PAW deployment.
- Defined onboarding, access, support, and operational processes.
- Design risks and dependencies actively managed.
- Implementation teams enabled to build and deploy the solution successfully.
Other Transferable Skills Required
- Strong understanding of PAM and PAW concepts.
- Experience in complex enterprise, network, infrastructure, security, or telecom environments.
- Ability to work across multiple teams and manage ambiguity.
- Strong stakeholder management and communication skills.
- Ability to own deliverables and drive outcomes.
- Good understanding of governance, risk, compliance, and operational readiness.
- Ability to identify risks, dependencies, and blockers early.
- Strong documentation and presentation skills.
- Experience working in high-pressure, time-sensitive delivery environments.
Disclaimer:
This vacancy is being advertised by either Advanced Resource Managers Limited, Advanced Resource Managers IT Limited or Advanced Resource Managers Engineering Limited ("ARM"). ARM is a specialist talent acquisition and management consultancy. We provide technical contingency recruitment and a portfolio of more complex resource solutions. Our specialist recruitment divisions cover the entire technical arena, including some of the most economically and strategically important industries in the UK and the world today. We will never send your CV without your permission. Where the role is marked as Outside IR35 in the advertisement this is subject to receipt of a final Status Determination Statement from the end Client and may be subject to change.