Solution Designer – PAM/PAW in London

• Solution Designer - PAM/PAW
• 6 Months
• Hybrid/London - 2 days per week on site
• £600-675 per day (Inside IR35)

My client in the telecommunications sector are looking for a Designer to join their fast-paced team on an initial 6 month contract.

***The selected candidate MUST HAVE Privileged Access Management/Privileged Access Workstations design experience***

The Solution Designer will be responsible for developing detailed designs for the PAM and PAW solution based on the approved architecture.

The role will convert high-level architecture into implementable designs, ensuring that the solution can be built, tested, deployed, and supported effectively.

Key Responsibilities

• Produce detailed technical designs for PAM and PAW implementation.
• Translate architecture principles and requirements into build-ready design specifications.
• Define user access flows, privileged account onboarding models, workstation access patterns, and integration requirements.
• Design PAM onboarding processes for privileged accounts, network devices, platforms, and administrative users.
• Define PAW configuration requirements, including device hardening, access restrictions, connectivity, monitoring, and support processes.
• Work with network, security, infrastructure, endpoint, identity, and operations teams to validate the design.
• Identify design-level risks, gaps, assumptions, and dependencies.
• Support engineers and implementation teams during build, test, and deployment.
• Ensure designs include operational considerations such as support model, monitoring, logging, incident handling, and access review.
• Produce detailed design documents, interface specifications, workflow diagrams, and configuration guides.
• Support test planning, defect resolution, and design clarification during the design is compliant with security policies, audit requirements, and regulatory expectations.
• Required Skills and Experience
• Strong technical design experience in security, identity, infrastructure, or network environments.
• Practical understanding of PAM and PAW concepts and implementation considerations.
• Experience designing secure access solutions for privileged users and administrators.
• Understanding of network access, firewall rules, remote access, jump servers, hardened workstations, and administrative access paths.
• Ability to produce clear, detailed, and implementation-ready technical documentation.
• Experience working with architects, engineers, testers, PMs, BAs, and operations teams.
• Strong problem-solving skills and ability to work through complex technical dependencies.
• Ability to take ownership of design deliverables and drive them through review and approval.

Desirable Skills

• Experience with PAM platforms such as Cyber Ark, Beyond Trust, Delinea, or similar.
• Experience with endpoint security, device hardening, Active Directory, Entra ID, Intune, SCCM, or similar tooling.
• Experience in telecom, managed services, or large enterprise security programmes.
• Experience with TSA, migration, separation, or transformation programmes.
• Expected Outcomes
• Approved low-level designs and detailed design documents.
• Clear implementation guidance for PAM and PAW deployment.
• Defined onboarding, access, support, and operational processes.
• Design risks and dependencies actively managed.
• Implementation teams enabled to build and deploy the solution successfully.
• Other Transferable Skills Required
• Strong understanding of PAM and PAW concepts.
• Experience in complex enterprise, network, infrastructure, security, or telecom environments.
• Ability to work across multiple teams and manage ambiguity.
• Strong stakeholder management and communication skills.
• Ability to own deliverables and drive outcomes.
• Good understanding of governance, risk, compliance, and operational readiness.
• Ability to identify risks, dependencies, and blockers early.
• Strong documentation and presentation skills.
• Experience working in high-pressure, time-sensitive delivery environments.
• #J-18808-Ljbffr