Privileged Access Manager

Job Title:

Privileged Access Manager

Contract :6 months

Location:

Erskine , Scotland(5 days onsite)

Location:

Corsham, UK(Hybrid
-2 days a week)

We are seeking an experienced Privileged Access Management (PAM) Architect to lead the design, implementation, and optimization of enterprise PAM solutions, with a strong focus on Cyber Ark. You will play a critical role in securing critical systems and sensitive data within a highly secure, high-assurance environment.

Clearance:
Must hold an active, fully transferrable DV (Developed Vetting) Clearance.

Nationality:
Strictly UK Nationals only

• Architecture & Design:
  Lead the end-to-end architecture, design, and deployment of Cyber Ark PAM solutions (PAS, CPM, PSM, PVWA, PTA).
• Documentation:
  Produce high-quality documentation, including High-Level Designs (HLDs), Low-Level Designs (LLDs), security architectures, and runbooks.
• Implementation:
  Define and implement privileged access policies, credential management, session monitoring, and vaulting strategies.
• Integration:
  Integrate PAM controls with existing enterprise environments, including Active Directory/LDAP, SIEM, and ITSM tools.
• Leadership & Advisory:
  Act as the technical SME, providing mentorship to internal teams and advising on industry standards (NIST, ISO 27001).
• Stakeholder Engagement:
  Engage directly with stakeholders, including visiting secure customer sites to build trusted relationships and ensure successful delivery.

• Proven track record in a Senior SME role within enterprise-scale environments.
• Deep, hands-on technical expertise with Cyber Ark capabilities and architecture.
• Strong understanding of Identity and Access Management (IAM) principles, privileged credential lifecycle management, and least privilege models.
• Prior experience delivering secure systems into high-assurance, regulated sectors (Defence and/or Aerospace is highly desirable).
• Familiarity with Dev Sec Ops  and secrets management is advantageous.

• Cyber Ark Certified Delivery Engineer (CDE) / Defender (CDP) / Sentry
• CISSP, CISM, or equivalent security certifications
• TOGAF or similar architecture frameworks