PAM Architect

CBSbutler Ltd.; Corsham; On-site; GBP 92,000 - 101,000; Full time

Job summary

CBSbutler Ltd. is seeking a PAM Architect to lead enterprise CyberArk PAM implementations in Corsham. The role requires active DV clearance, involvement with PAS, CPM, PSM, PVWA, and PTA, and collaboration with on-site stakeholders.

The position is hybrid in Corsham, with sole British nationals required due to project nature and an Inside IR35 contract at £500-£550 per day. Immediate start options are likely for a senior PAM SME.

Qualifications

• Proven experience as a PAM Architect or Senior PAM SME.
• Strong hands-on CyberArk experience across PAS, CPM, PSM, PVWA and PTA.
• Enterprise-scale PAM architecture and implementation experience.
• Understanding of IAM, least privilege and privileged credential lifecycle management.
• Experience with session isolation/recording and secure access controls.
• Excellent stakeholder management and communication skills.
• Experience of DevSecOps and secrets management would be advantageous.

Responsibilities

• Architect and deliver enterprise CyberArk PAM solutions, including PAS, CPM, PSM and PVWA.
• Define privileged access, credential management, vaulting and session monitoring strategies.
• Produce HLDs, LLDs, security architecture documentation and implementation runbooks.
• Integrate CyberArk with Active Directory/LDAP, SIEM and ITSM platforms.
• Conduct security assessments, gap analysis and remediation activities.
• Provide PAM technical leadership, guidance and mentoring.
• Work closely with customer and internal stakeholders, including on-site customer engagement.
• Drive continuous improvement and innovation across the PAM capability.

Skills

CyberArk PAM

PAM architecture

IAM

Least privilege

Session monitoring

Security architecture

Stakeholder mgmt

DevSecOps

Job description

PAM Architect

+9 months +

+DV cleared - current active clearance

+Sole British nationals only due to the nature of the project

+Hybrid working in Corsham

+Inside IR35

+£500 - £550 a day

Key Responsibilities

• Architect and deliver enterprise CyberArk PAM solutions, including PAS, CPM, PSM and PVWA
• Define privileged access, credential management, vaulting and session monitoring strategies
• Produce HLDs, LLDs, security architecture documentation and implementation runbooks
• Integrate CyberArk with Active Directory/LDAP, SIEM and ITSM platforms
• Conduct security assessments, gap analysis and remediation activities
• Provide PAM technical leadership, guidance and mentoring
• Work closely with customer and internal stakeholders, including on-site customer engagement
• Drive continuous improvement and innovation across the PAM capability

Key Skills & Experience

• Proven experience as a PAM Architect or Senior PAM SME
• Strong hands‑on CyberArk experience, ideally across PAS, CPM, PSM, PVWA and PTA
• Enterprise‑scale PAM architecture and implementation experience
• Strong understanding of IAM, least privilege and privileged credential lifecycle management
• Experience with session isolation/recording and secure access controls
• Strong technical documentation and security architecture skills
• Knowledge of NIST, ISO 27001 or similar security frameworks
• Excellent stakeholder management and communication skills
• Experience of DevSecOps and secrets management would be advantageous