PAM Platform Owner

Overview

We’re Kingfisher, A team made up of over 74,000 passionate people who bring Kingfisher - and all our other brands: B&Q, Screwfix, Brico Depot, Castorama and Koctas to life. Guided by our purpose Better Homes. Better Lives. For Everyone. We believe a better world starts with better homes, and we work every day to make that a reality. Join us and help shape the future of home improvement.

We have a new opportunity for a PAM Platform Owner to join us, to lead the product direction and technical delivery of Kingfisher’s Privileged Access Management (PAM) capability, ensuring it is secure, resilient and aligned to Zero Trust and cloud-first principles. This role brings together product ownership, engineering oversight and risk-focused thinking to reduce identity risk and make privileged access simpler and more effective for engineers. 

We are open to basing the role out of any of our UK office locations in Southampton, Paddington or Yeovil, with an expectation of 12 days a month in the office. If not based out of Southampton we would expect travel to this site at least once a week, due to the majority of the wider team and stakeholders being based there. 

What's the job?

• Own and evolve the PAM product backlog, OKRs and roadmap in partnership with Identity Design and Architecture, driving measurable outcomes that reduce risk and improve user experience.

• Translate Zero Trust and architectural direction into actionable product work, ensuring alignment with agreed design principles and clear delivery outcomes.

• Define and maintain the PAM control framework, covering areas such as PIM/JIT, session management, endpoint privilege management and secrets management.

• Lead the delivery of reduced standing privilege through time-bound access, approvals and strong monitoring of privileged activity.

• Ensure high-quality audit evidence is produced and that findings are addressed promptly, maintaining strong control effectiveness.

• Drive platform reliability and operational performance through clear service objectives, observability, resilience testing and continuous improvement.

• Enable scalable and consistent onboarding through automation, APIs and modern engineering practices, supporting servers, cloud workloads and pipelines. 

What you'll bring

• Hands‑on experience delivering PAM across servers, cloud and DevOps, including just‑in‑time access, session recording, credential rotation and breakglass processes.

• Experience with enterprise PAM platforms such as Delinea (preferred), CyberArk or BeyondTrust.

• Proven ability to own a product roadmap, define OKRs, manage a backlog and deliver measurable outcomes at scale.

• Strong understanding of privileged access security controls, Zero Trust principles and audit expectations.

• Engineering fluency with APIs, automation, CI/CD and infrastructure‑as‑code or policy‑as‑code practices.

• Experience leading/directing managed service partners and delivering high-quality incident, problem and change management. 

How We Work We believe in flexibility and balance. Our hybrid model blends home working for focus with time spent connecting and collaborating - whether in our offices or at offsite locations. On average, around 60% of your time will involve in-person collaboration.

We value the perspectives new team members bring and encourage you to apply - even if you don’t meet 100% of the requirements.

What We Offer An inclusive environment where your potential is limited only by your imagination. We encourage new ideas, support experimentation, and strive to create a workplace where everyone can be their best self. Find out more about Diversity & Inclusion at Kingfisher here.

We also offer a competitive benefits package and plenty of opportunities to stretch and grow your career. Scroll down below to find out more about our benefits.

Diversity & Inclusion Our customers come from all walks of life - and so do we. We’re committed to ensuring all colleagues, future colleagues, and applicants are treated equally, regardless of age, gender, marital or civil partnership status, ethnicity, culture, religion, belief, political opinion, disability, gender identity, gender expression, or sexual orientation.

Interested? Great, apply now and help us to Power the Possible.

#LI-KO1