Cyberark SME - PAM Architect

CBS Butler; Newcastle upon Tyne; Sur place; GBP 150 000 - 190 000; Temps partiel

Résumé du poste

CBS Butler is seeking an experienced PAM Architect/CyberArk SME for a ~6-month contract on UK secure sites. You will lead design and delivery of enterprise CyberArk PAM solutions, mentor teams, and collaborate with stakeholders across DXC and customer environments.

Deep hands-on CyberArk expertise is essential, including PAS, CPM, PSM and PVWA. Travel to Corsham and other UK sites is required; some work will be expensed. Clearance required is DV or higher.

Qualifications

• Proven experience as a PAM Architect, CyberArk Architect or Senior CyberArk SME.
• Strong hands-on CyberArk expertise across PAS, CPM, PSM and PVWA.
• Experience delivering enterprise PAM solutions in secure environments.

Responsabilités

• Lead architecture, design and implementation of enterprise CyberArk PAM solutions.
• Provide technical SME expertise across CyberArk components and integrations.
• Deliver end-to-end CyberArk deployments, including Privilege Cloud where applicable.
• Design privileged access policies, credential management, vaulting, session monitoring and least-privilege controls.
• Produce high-quality HLDs, LLDs and security architecture documentation.
• Integrate CyberArk with Active Directory/LDAP, SIEM and ITSM platforms.
• Conduct security assessments, identify gaps and remediation recommendations.
• Support audit and security assurance activities.

Connaissances

PAM Architect

CyberArk expertise

IAM

Security architecture

Stakeholder management

Outils

CyberArk PAS

CyberArk CPM

CyberArk PSM

CyberArk PVWA

Description du poste

PAM Architect/CyberArk SME+ Contract | Approximately 6 months | UK Secure Sites | Active SC or Higher Clearance

+ Role can be based out of: Newcastle, Hampshire, Erskine

+ Requires travel to Corsham (expensed)

+ Rate: to £91 p/hour Inside IR35

+ DV Clearance required

We are seeking an experienced Privileged Access Management (PAM) Architect/SME with strong hands-on CyberArk expertise to lead the design and delivery of enterprise PAM solutions within a secure, high-assurance environment.

Working on a major secure technology programme, you will provide technical leadership across PAM architecture, implementation and optimisation, helping to protect privileged accounts, critical systems and sensitive data. The role involves working across DXC and customer premises, engaging directly with technical teams and stakeholders.

Key Responsibilities

• Lead the architecture, design and implementation of enterprise CyberArk PAM solutions.

• Provide technical SME expertise across CyberArk PAS, CPM, PSM and PVWA, with PTA desirable.

• Deliver end-to-end CyberArk deployments, including Privilege Cloud where applicable.

• Design privileged access policies, credential management, vaulting, session monitoring and least-privilege controls.

• Produce high-quality HLDs, LLDs, security architecture documentation and implementation runbooks.

• Integrate PAM solutions with Active Directory/LDAP, SIEM and ITSM platforms.

• Conduct security assessments, identify gaps and recommend remediation.

• Support audit, compliance and security assurance requirements.

• Provide technical leadership, mentoring and stakeholder engagement across secure customer environments.

Essential Skills & Experience

• Proven experience as a PAM Architect, CyberArk Architect or Senior CyberArk SME.

• Strong hands-on CyberArk expertise, particularly PAS, CPM, PSM and PVWA.

• Experience designing and delivering enterprise-scale PAM solutions.

• Strong understanding of IAM, privileged credential life cycle management, session isolation and recording, and least-privilege principles.

• Proven experience producing HLDs, LLDs and technical security documentation.

• Experience integrating CyberArk with enterprise infrastructure and security tooling.

• Excellent technical leadership, problem-solving and stakeholder management skills.

Desirable Experience

• Defence, aerospace or other highly secure, regulated environments.

• Familiarity with DevSecOps and secrets management.

• CyberArk certifications, such as Defender, Sentry or Certified Delivery Engineer.

• CISSP, CISM, TOGAF or equivalent certifications.