PAM Architect

CBSbutler Holdings Limited trading as CBSbutler; Corsham; On-site; GBP 92,000 - 101,000; Full time

Benefits offered by this job

Hybrid working in Corsham

Job summary

CBSbutler Holdings Limited trading as CBSbutler is seeking a PAM Architect to deliver enterprise CyberArk PAM solutions and define privileged access strategies. The role involves collaboration with on-site stakeholders in Corsham, delivering architecture documentation and runbooks.

The ideal candidate will have hands-on CyberArk across PAS, CPM, PVWA, PSM and PTA, with strong IAM knowledge and experience in security frameworks.

Qualifications

• Proven experience as a PAM Architect or Senior PAM SME.
• Hands-on CyberArk experience across PAS, CPM, PSM, PVWA and PTA.
• Enterprise-scale PAM architecture and implementation experience.
• Strong understanding of IAM and privileged credential lifecycle management.
• Experience with session isolation/recording and secure access controls.
• Strong documentation and security architecture skills.
• Knowledge of NIST, ISO 27001 or similar security frameworks.
• Excellent stakeholder management and communication skills.
• Experience of DevSecOps and secrets management would be advantageous.

Responsibilities

• Architect and deliver enterprise CyberArk PAM solutions, including PAS, CPM, PSM and PVWA.
• Define privileged access, credential management, vaulting and session monitoring strategies.
• Produce HLDs, LLDs, security architecture documentation and runbooks.
• Integrate CyberArk with Active Directory/LDAP, SIEM and ITSM platforms.
• Conduct security assessments, gap analysis and remediation activities.
• Provide PAM technical leadership, guidance and mentoring.
• Work with customer and internal stakeholders, including on-site engagement.
• Drive continuous improvement and innovation across the PAM capability.

Skills

PAM architecture

CyberArk PAS

CyberArk CPM

CyberArk PVWA

CyberArk PTA

IAM

least privilege

credential lifecycle management

session isolation

security architecture

stakeholder management

DevSecOps / secrets management

Active Directory/LDAP integration

Tools

CyberArk PAS

CyberArk CPM

CyberArk PVWA

CyberArk PTA

Active Directory/LDAP

Job description

PAM Architect

• +9 months +
• +DV cleared - current active clearance
• +Sole British nationals only due to the nature of the project
• +Hybrid working in Corsham
• +Inside IR35
• +£500 - £550 a day

Key Responsibilities

• Architect and deliver enterprise CyberArk PAM solutions, including PAS, CPM, PSM and PVWA
• Define privileged access, credential management, vaulting and session monitoring strategies
• Produce HLDs, LLDs, security architecture documentation and implementation runbooks
• Integrate CyberArk with Active Directory/LDAP, SIEM and ITSM platforms
• Conduct security assessments, gap analysis and remediation activities
• Provide PAM technical leadership, guidance and mentoring
• Work closely with customer and internal stakeholders, including on-site customer engagement
• Drive continuous improvement and innovation across the PAM capability

Key Skills & Experience

• Proven experience as a PAM Architect or Senior PAM SME
• Strong hands-on CyberArk experience, ideally across PAS, CPM, PSM, PVWA and PTA
• Enterprise-scale PAM architecture and implementation experience
• Strong understanding of IAM, least privilege and privileged credential lifecycle management
• Experience with session isolation/recording and secure access controls
• Strong technical documentation and security architecture skills
• Knowledge of NIST, ISO 27001 or similar security frameworks
• Excellent stakeholder management and communication skills
• Experience of DevSecOps and secrets management would be advantageous