Solution Architect - Identity and Privilege Management

Welcome to Haleon. We’re a purpose-driven, world-class consumer company putting everyday health in the hands of millions. In just three years since our launch, we’ve grown, evolved and are now entering an exciting new chapter – one filled with bold ambitions and enormous opportunity.

Our trusted portfolio of brands – including Sensodyne®, Panadol®, Advil®, Voltaren®, Theraflu®, Otrivin®, and Centrum® – lead in resilient and growing categories. What sets us apart is our unique blend of deep human understanding and trusted science.

Now it’s time to fully realise the full potential of our business and our people. We do this through our Win as One strategy. It puts our purpose – to deliver better everyday health with humanity – at the heart of everything we do. It unites us, inspires us, and challenges us to be better every day, driven by our agile, performance-focused culture.

About the role

The Identity and Privilege Management Solution Architect is a senior technical role responsible for designing, developing, and delivering secure identity and privilege management solutions across the enterprise.

This position translates enterprise cybersecurity architecture strategies into practical, implementable solutions that align with business objectives, effectively mitigate identity-related risks, support regulatory compliance, and enable secure and seamless access management.

The role requires strong solution design and product selection skills with deep expertise in SailPoint, CyberArk, Entra ID, Active Directory, MFA, SSO, and related identity and privilege management technologies.

Key responsibilities:

• Design and develop secure solution architectures for identity and privilege management initiatives, ensuring alignment with the enterprise cybersecurity architecture strategy, frameworks, and standards.

• Provide expert technical leadership in the solutioning of identity governance, privileged access management, and access control requirements.

• Collaborate with business leaders, IT teams, security operations, HR, and delivery teams to translate business needs and security requirements into robust, scalable, and secure identity and privilege management solution designs.

• Lead the evaluation, selection, and integration of appropriate identity and privilege management solutions, with particular focus on SailPoint for identity governance and administration, CyberArk for privileged access management, Entra ID, Active Directory, MFA, and SSO.

• Conduct solution-level risk assessments and recommend mitigation strategies to address security gaps in identity and privilege architectures.

• Ensure solution designs comply with architecture governance processes, standards, and regulatory requirements.

• Work closely with engineering and delivery teams to support the implementation, integration, and validation of secure identity and privilege management solutions.

• Contribute to incident response planning and ensure solution resilience against identity-based cyber threats.

• Communicate complex identity and privilege management solution architecture concepts clearly to both technical and non-technical audiences, including project teams and senior leadership.

Your Profile 

Required qualifications:

• Bachelor’s degree or equivalent relevant work experience

• 7+ years of professional experience focused on Identity and Privilege Management (IAM/PAM) solution architecture

• Experience designing and delivering secure identity and privilege management solutions in complex hybrid and multi-cloud environments

• Hands-on expertise with Identity Governance and Administration (IGA), Privileged Access Management (PAM), and modern identity platforms, including SailPoint, CyberArk, Microsoft Entra ID, and Active Directory

• Understanding of Zero Trust principles, identity governance, privileged access controls, authentication, authorization, MFA, SSO, and federation technologies

• Ability to translate business requirements and architecture strategies into practical, scalable, and secure solutions

• Proven ability to influence and collaborate effectively with architecture, engineering, security, and delivery teams

• Excellent stakeholder management and communication skills, with the ability to explain complex technical concepts to both technical and non-technical audiences

• Strong commercial awareness and understanding of how identity security enables business value while reducing risk

Preferred qualifications:

• Professional certifications such as CISSP and CISM

• Experience selecting, evaluating, and implementing enterprise IAM and PAM solutions

• Knowledge of security and compliance frameworks including GDPR, NIS2, and ISO 27001

• Up-to-date knowledge of emerging identity security threats, industry trends, and best practices

Why Haleon?   

None of us should ever feel like we’re standing still. At Haleon, we want you to feel supported, valued, and always progressing. Improving everyday health takes dedication, energy, and effort — so we reward your contribution with a benefits package that includes:   

• Contract of employment    

• Annual bonus that reflects performance    

• Hybrid@Haleon our philosophy to hybrid work (2 days onsite per week) 

• Private medical package (Medicover) with additional preventive healthcare services for employees and their eligible    

• Multisport card or points on the Multicafeteria Benefits account       

• Health and wellbeing programmes that take care of you physically and mentally    

• Pension plan membership and savings programme (PPE)    

• Personalized learning paths and access to diverse development tools to support your professional growth.    

• Generali Life insurance    

• Supportive community and integration events   

• Family benefits (extra parental leave, caregiver’s policy)    

• Free car and bike parking   

#Li-hybrid 

   

    

PLN 235 878,00 - PLN 324 331,70 The salary range for this position is indicative and provided as a guide. The final offer may vary depending on factors including relevant experience, skills, qualifications, and internal equity considerations. Further details regarding the total reward and benefits package will be shared during the recruitment process. Salary ranges may vary by location in line with local market conditions and applicable pay transparency regulations. Compensation information is shared for the primary location of this role. Where the position is advertised with additional locations the compensation range will be discussed during the recruiting process.

   

 

 Job Posting End Date

 

 

2026-08-30

 

 

 

Equal Opportunities

Haleon are committed to mobilising our purpose in a way that represents the diverse consumers and communities who rely on our brands every day. It guides us in creating an inclusive culture, where different backgrounds and views are valued and respected – all in support of understanding and best serving the needs of our consumers and unleashing the full potential of our people. It’s important to us that Haleon is a place where all our employees feel they truly belong.

During the application process, we may ask you to share some personal information, which is entirely voluntary. This information ensures we meet certain regulatory and reporting obligations and supports the development, refinement, and execution of our inclusion and belonging programmes that are open to all Haleon employees. 

The personal information you provide will be kept confidential, used only for legitimate business purposes, and will never be used in making any employment decisions, including hiring decisions.

 

 

 

Adjustment or Accommodations Request

If you require a reasonable adjustment or accommodation or other assistance to apply for a job at Haleon at any stage of the application process, please let your recruiter know by providing them with a description of specific adjustments you are requesting. We’ll provide all reasonable adjustments to support you throughout the recruitment process and treat all information you provide us in confidence. 

 

 

 

Note to candidates

The Haleon recruitment team will contact you using a Haleon email account (@haleon.com). If you are not sure whether the email you received is from Haleon, please get in touch.