PAM Product Owner

We’re Kingfisher, a team made up of over 74,000 passionate people who bring Kingfisher - and all our other brands: B&Q, Screwfix, Brico Depot, Castorama and Koctas to life. Guided by our purpose Better Homes. Better Lives. For Everyone. We believe a better world starts with better homes, and we work every day to make that a reality. Join us and help shape the future of home improvement.

We have a new opportunity for a PAM Product Owner to join us, to provide product leadership for Kingfisher’s Privileged Access Management capability, shaping how privileged access is secured across servers, cloud, DevOps and endpoints. You will define and deliver a clear strategy and roadmap that reduces identity risk, strengthens auditability and supports a Zero Trust, cloud‑first approach. This role balances product ownership, security leadership and hands‑on technical direction to simplify privileged access journeys for engineers.

We are open to basing the role out of any of our UK office locations in Paddington, Southampton or Yeovil, with an expectation of 12 days a month in the office. Due to the wider team and stakeholders the role supports mostly being based out of Southampton, we would expect travel to this site as required if not fully based there.

• Own and continuously evolve the PAM product strategy, roadmap, backlog and OKRs to drive risk reduction, control maturity and improved engineer experience.
• Translate Zero Trust and architectural direction into clear PAM outcomes, epics and deliverables across servers, cloud, DevOps and endpoints.
• Define and maintain the PAM control framework, including just‑in‑time access, session management and recording, secrets management, endpoint privilege management and breakglass processes.
• Reduce standing privilege through time‑bound elevation, approvals and monitoring, supported by strong analytics and detection capabilities.
• Ensure PAM services are secure, resilient and auditable, producing high‑quality evidence and resolving findings promptly.
• Lead PAM platform reliability, including SLOs, observability, disaster recovery routines and regular breakglass testing.
• Work closely with engineering, security and identity partners to embed secure‑by‑default behaviours and clear guidance for privileged users.

• Hands‑on experience delivering PAM across servers, cloud and DevOps, including just‑in‑time access, session recording, credential rotation and breakglass processes.
• Experience with enterprise PAM platforms such as Delinea (preferred), CyberArk or BeyondTrust.
• Proven ability to own a product roadmap, define OKRs, manage a backlog and deliver measurable outcomes at scale.
• Strong understanding of privileged access security controls, Zero Trust principles and audit expectations.
• Engineering fluency with APIs, automation, CI/CD and infrastructure‑as‑code or policy‑as‑code practices.
• Experience leading/directing managed service partners and delivering high-quality incident, problem and change management.

We believe in flexibility and balance. Our hybrid model blends home working for focus with time spent connecting and collaborating - whether in our offices or at offsite locations. On average, around 60% of your time will involve in-person collaboration.

We value the perspectives new team members bring and encourage you to apply - even if you don’t meet 100% of the requirements.

An inclusive environment where your potential is limited only by your imagination. We encourage new ideas, support experimentation, and strive to create a workplace where everyone can be their best self. We also offer a competitive benefits package and plenty of opportunities to stretch and grow your career.

Our customers come from all walks of life- and so do we. We’re committed to ensuring all colleagues, future colleagues, and applicants are treated equally, regardless of age, gender, marital or civil partnership status, ethnicity, culture, religion, belief, political opinion, disability, gender identity, gender expression, or sexual orientation.