Privileged Access Management (PAM) Architect

Job Title:

Privileged Access Management Architect

Contract :6 months

Location:

Erskine , Scotland(5 days onsite)

Location:

Corsham, UK(Hybrid
-2 days a week)

The Opportunity

We are seeking an experienced Privileged Access Management (PAM) Architect to lead the design, implementation, and optimization of enterprise PAM solutions, with a strong focus on Cyber Ark. You will play a critical role in securing critical systems and sensitive data within a highly secure, high-assurance environment.

Mandatory Security Requirements

Clearance:
Must hold an active, fully transferrable DV (Developed Vetting) Clearance.

Nationality:
Strictly UK Nationals only

Key Responsibilities

Architecture & Design:
Lead the end-to-end architecture, design, and deployment of Cyber Ark PAM solutions (PAS, CPM, PSM, PVWA, PTA).

Documentation:
Produce high-quality documentation, including High-Level Designs (HLDs), Low-Level Designs (LLDs), security architectures, and runbooks.

Implementation:
Define and implement privileged access policies, credential management, session monitoring, and vaulting strategies.

Integration:
Integrate PAM controls with existing enterprise environments, including Active Directory/LDAP, SIEM, and ITSM tools.

Leadership & Advisory:
Act as the technical SME, providing mentorship to internal teams and advising on industry standards (NIST, ISO 27001).

Stakeholder Engagement:
Engage directly with stakeholders, including visiting secure customer sites to build trusted relationships and ensure successful delivery.

Required Skills & Experience

Proven track record in a PAM Architect role within enterprise-scale environments.

Deep, hands-on technical expertise with Cyber Ark capabilities and architecture.

Strong understanding of Identity and Access Management (IAM) principles, privileged credential lifecycle management, and least privilege models.

Prior experience delivering secure systems into high-assurance, regulated sectors (Defence and/or Aerospace is highly desirable).

Familiarity with Dev Sec Ops  and secrets management is advantageous.

Desirable Certifications

Cyber Ark Certified Delivery Engineer (CDE) / Defender (CDP) / Sentry

CISSP, CISM, or equivalent security certifications

TOGAF or similar architecture frameworks

If interested please reply with your CV to (url removed) or call me at (phone number removed).

Randstad Technologies is acting as an Employment Business in relation to this vacancy