CyberArk Architect

CBSbutler Holdings Limited trading as CBSbutler; Farnborough; On-site; GBP 101,000 - 129,000; Full time

Job summary

CBSbutler Holdings Limited trading as CBSbutler is seeking two CyberArk Architects for a Defence MOD programme. The role is on-site in Farnborough, Newcastle or Erskine with active DV clearance and inside IR35.

You will lead architecture and hands-on delivery of PAM solutions across complex environments. Lead end-to-end CyberArk deployments (PAS/CPM/PSM/PVWA), design privileged access policies and integrate with AD/LDAP/SIEM/ITSM, while producing HLDs/LLDs and security runbooks.

Qualifications

• Proven experience as CyberArk Architect or Senior PAM SME
• Hands-on CyberArk expertise including PAS, CPM, PSM, PVWA; PTA advantageous
• Experience delivering enterprise PAM solutions
• Understanding of IAM and privileged credential lifecycle
• Producing HLDs, LLDs and security architecture documentation
• Experience integrating CyberArk with enterprise infrastructure and security tooling
• Experience in MOD/Defence or highly secure environments
• Excellent stakeholder management and communication

Responsibilities

• Lead the architecture, design and implementation of enterprise-scale CyberArk PAM solutions
• Act as the technical SME for Privileged Access Management
• Deliver end-to-end CyberArk deployments (PAS, Privilege Cloud) and components
• Design privileged access policies, credential management, vaulting, session monitoring
• Integrate CyberArk with AD, LDAP, SIEM and ITSM platforms
• Produce High-Level Designs and Low-Level Designs and security documentation
• Conduct security assessments and remediation activities
• Support security audits and compliance in secure environments
• Provide technical leadership to engineering teams
• Work on-site with customer and supplier teams to ensure delivery

Skills

CyberArk PAM

PAS

CPM

PSM

PVWA

IAM concepts

Security architecture

Stakeholder management

Tools

Active Directory

LDAP

SIEM

ITSM

Job description

CyberArk Architect x2

+6-12 months +

+On site in Farnborough or Newcastle or Erskine

+DV cleared role - current active clearance is essential

+Inside IR35

+ 550 - 700 a day

We are seeking an experienced CyberArk Architect / Privileged Access Management (PAM) SME to support a major Defence and MOD programme. This is an excellent contract opportunity for a technically strong architect with extensive CyberArk expertise and experience delivering secure enterprise solutions within highly sensitive environments.

You will lead the architecture, design, implementation and optimisation of enterprise Privileged Access Management solutions, helping to protect critical systems, privileged credentials and sensitive data across complex infrastructure environments.

Working closely with security, infrastructure and application teams, you will provide technical leadership and hands-on delivery, engaging directly with stakeholders across customer and supplier sites.

Key Responsibilities

• Lead the architecture, design and implementation of enterprise-scale CyberArk PAM solutions.

• Act as the technical SME for Privileged Access Management, advising on architecture, best practice and security standards.

• Deliver end-to-end CyberArk deployments, including Privileged Access Security (PAS), Privilege Cloud and associated components.

• Design and implement privileged access policies, credential management, vaulting, session monitoring and least-privilege controls.

• Integrate CyberArk solutions with Active Directory, LDAP, SIEM and ITSM platforms.

• Produce high-quality technical documentation, including High-Level Designs (HLDs), Low-Level Designs (LLDs), security architecture documentation and implementation runbooks.

• Conduct security assessments, identify gaps and recommend remediation activities.

• Support security audits and compliance requirements within secure, high-assurance environments.

• Provide technical leadership and guidance to engineering teams and key stakeholders.

• Work on-site with customer and supplier teams to ensure successful implementation and delivery.

Essential Skills & Experience

• Proven experience as a CyberArk Architect, PAM Architect or Senior PAM SME.

• Strong hands-on expertise in CyberArk, including PAS, CPM, PSM and PVWA; PTA experience is advantageous.

• Experience designing and delivering complex, enterprise-scale PAM solutions.

• Strong understanding of Identity and Access Management (IAM), privileged credential lifecycle management, session isolation and session recording.

• Demonstrable experience producing HLDs, LLDs and security architecture documentation.

• Experience integrating CyberArk with enterprise infrastructure and security tooling.

• Strong knowledge of security architecture principles, access controls and secure system design.

• Excellent stakeholder management and communication skills.

• Previous experience supporting MOD, Defence or other highly secure environments.

Security & Eligibility Requirements

• Active DV clearance is essential.

• Must be a sole British national.

• Must be willing and able to work on-site at Farnborough, Newcastle or Erskine.

• Experience delivering solutions within secure Defence or MOD environments is required.

Desirable

• CyberArk certifications, such as Defender, Sentry or Certified Delivery Engineer.

• Experience with DevSecOps and secrets management.

• CISSP, CISM or equivalent security qualifications.

• TOGAF or other enterprise architecture frameworks.