PAM Architect

Lucid Support Services Ltd; Corsham; On-site; GBP 90,000 - 130,000; Full time

Job summary

Lucid Support Services Ltd in the UK is seeking an experienced Privileged Access Management (PAM) Architect to lead design, deployment and optimization of enterprise PAM, with emphasis on CyberArk. This role demands strong technical leadership, hands-on delivery, and collaboration with secure environments.

You will work across customer sites, support audits, define privileged access policies, integrate PAM with IAM, AD/LDAP, SIEM, and ITSM, and mentor teams while ensuring regulatory compliance.

Qualifications

• Experience as PAM Architect or Senior SME in enterprise environments.
• Hands-on CyberArk deployment and configuration.
• Deep knowledge of IAM principles and security best practices.

Responsibilities

• Lead the architecture, design, and implementation of CyberArk-based PAM solutions across on-premise environments.
• Act as the technical SME for PAM, providing guidance on best practices and standards.
• Deliver end-to-end CyberArk deployments, including PAS, Privilege Cloud, and related components.
• Define and implement privileged access policies, credential management, session monitoring, and vaulting strategies.
• Collaborate with security, infrastructure, and application teams to integrate PAM controls.
• Support audits and compliance activities, ensuring alignment with standards like NIST/ISO 27001.

Skills

PAM Architect

CyberArk

IAM

Security architecture

Tools

CyberArk PAS

CPM

PSM

PVWA

PTA

Job description

Job title: Privileged Access Management (PAM) Architect

Duration: 9 months

Clearance required: DV or DV Eligible

Rate: To be discussed

Location: Hybrid, onsite in Corsham twice a week

Specification: Below

Overview:

• We are seeking an experienced Privileged Access Management (PAM) Architect and Subject Matter Expert (SME) to lead the design, implementation, and optimisation of enterprise PAM solutions, with a strong focus on CyberArk. This role requires deep technical expertise, strategic oversight, and hands-on delivery capability within secure, high-assurance environments.
• The successful candidate will play a key role in securing critical systems and sensitive data, supporting a UK secure account, and engaging directly with stakeholders across customer sites.

Key Responsibilities:

• Lead the architecture, design, and implementation of CyberArk-based PAM solutions across on-premise complex enterprise environments
• Act as the technical SME for PAM, providing expert guidance on best practices, standards, and emerging capabilities
• Deliver end-to-end CyberArk deployments, including Privileged Access Security (PAS), Privilege Cloud, and associated components
• Define and implement privileged access policies, credential management, session monitoring, and vaulting strategies
• Work closely with security, infrastructure, and application teams to integrate PAM controls into existing environments
• Conduct security assessments and gap analyses, providing remediation recommendations aligned to industry standards (eg, NIST, ISO 27001)
• Support audit and compliance requirements, ensuring adherence to security policies and regulatory obligations
• Provide technical leadership and mentoring to internal teams and stakeholders
• Engage directly with internal and external stakeholder with visiting customers on-site, building trusted relationships and ensuring successful delivery outcomes
• Contribute to continuous improvement initiatives and innovation within the PAM domain

Required Skills & Experience:

• Proven experience in a PAM Architect or Senior SME role
• Strong hands-on expertise with CyberArk (PAS, CPM, PSM, PVWA, PTA, desirable)
• Experience designing and delivering enterprise-scale PAM solutions

Demonstrable experience producing high-quality design documentation, including:

• High-Level Designs (HLDs)
• Low-Level Designs (LLDs)
• Security architecture documents
• Implementation and operational runbooks
• Deep understanding of identity and access management (IAM) principles and security best practices
• Strong knowledge of privileged credential life cycle management, session isolation/recording, and least privilege models

Experience integrating CyberArk with:

• Active Directory/LDAP
• SIEM tools
• ITSM tools
• Familiarity with DevSecOps and secrets management is advantageous
• Excellent stakeholder management and communication skills

Industry Experience:

• Prior experience working in the Defence and/or Aerospace sector is highly desirable
• Understanding of high-assurance, regulated environments and secure system delivery

Desirable Certifications

• CyberArk Certified Delivery Engineer (CDE)/Defender (CDP)/Sentry
• CISSP, CISM, or equivalent security certifications
• TOGAF or other architecture frameworks (desirable)

At Lucid, we celebrate difference and value diverse perspectives, underpinned by our values 'Honesty, Integrity and Pragmatism'. We are proud to provide equal opportunities in line with our Diversity and Inclusion policy and welcome applications from all suitably qualified or experienced people, regardless of personal characteristics. If you have a disability or health condition and seek support throughout the recruitment process, please do not hesitate to contact us via the details below.