Job Title: Privileged Access Management Architect
Contract :6 months
Location:Erskine , Scotland(5 days onsite)
Location:Corsham, UK(Hybrid -2 days a week)
The Opportunity
We are seeking an experienced Privileged Access Management (PAM) Architect to lead the design, implementation, and optimization of enterprise PAM solutions, with a strong focus on CyberArk. You will play a critical role in securing critical systems and sensitive data within a highly secure, high-assurance environment.
Mandatory Security Requirements
- Clearance: Must hold an active, fully transferrable DV (Developed Vetting) Clearance.
- Nationality: Strictly UK Nationals only
Key Responsibilities
- Architecture & Design: Lead the end-to-end architecture, design, and deployment of CyberArk PAM solutions (PAS, CPM, PSM, PVWA, PTA).
- Documentation: Produce high-quality documentation, including High-Level Designs (HLDs), Low-Level Designs (LLDs), security architectures, and runbooks.
- Implementation: Define and implement privileged access policies, credential management, session monitoring, and vaulting strategies.
- Integration: Integrate PAM controls with existing enterprise environments, including Active Directory/LDAP, SIEM, and ITSM tools.
- Leadership & Advisory: Act as the technical SME, providing mentorship to internal teams and advising on industry standards (NIST, ISO 27001).
- Stakeholder Engagement: Engage directly with stakeholders, including visiting secure customer sites to build trusted relationships and ensure successful delivery.
Required Skills & Experience
- Proven track record in a PAM Architect role within enterprise-scale environments.
- Deep, hands-on technical expertise with CyberArk capabilities and architecture.
- Strong understanding of Identity and Access Management (IAM) principles, privileged credential lifecycle management, and least privilege models.
- Prior experience delivering secure systems into high-assurance, regulated sectors (Defence and/or Aerospace is highly desirable).
- Familiarity with DevSecOps and secrets management is advantageous.
Desirable Certifications
- CyberArk Certified Delivery Engineer (CDE) / Defender (CDP) / Sentry
- CISSP, CISM, or equivalent security certifications
- TOGAF or similar architecture frameworks
If interested please reply with your CV to dona.thomas@randstaddigital.com or call me at 07441 928393.
Randstad Technologies is acting as an Employment Business in relation to this vacancy.
...
