Privileged Access Management (PAM) Architect

Randstad Technologies Recruitment; Corsham; On-site; GBP 90,000 - 130,000; Full time

Job summary

Randstad Technologies Recruitment is seeking a Privileged Access Management (PAM) Architect & SME with deep CyberArk expertise to lead the architecture, design, and deployment of enterprise PAM solutions across mission-critical, high-assurance environments.

You will architect and deploy CyberArk components, produce HLDs/LLDs and runbooks, enforce vaulting and least-privilege policies, and ensure integration with AD/LDAP, SIEM, and ITSM while maintaining active UK DV clearance.

Responsibilities

• Architect and deploy end-to-end CyberArk solutions, including PAS, Privilege Cloud, CPM, PSM, PVWA, and PTA.
• Produce production-ready High-Level Designs (HLDs), Low-Level Designs (LLDs), and operational runbooks.
• Define and enforce vaulting strategies, credential lifecycle governance, session monitoring, and least-privilege policies.
• Integrate PAM solutions with Active Directory/LDAP, enterprise SIEM tools, and ITSM platforms.
• Conduct security posture and gap assessments aligned with ISO 27001 and NIST frameworks.

Job description

Job Title: Privileged Access Management (PAM) Architect & SME (CyberArk)

Location: Erksine or Farnborough or Preston or Corsham (on-site)

Security Clearance: Active DV Clearance

About the Role

Our client is seeking an experienced Privileged Access Management (PAM) Architect & Subject Matter Expert (SME) with deep expertise in CyberArk to lead the architecture, design, and deployment of enterprise-grade PAM solutions across mission-critical, high-assurance environments.

Key Responsibilities

• Architect and deploy end-to-end CyberArk solutions, including PAS, Privilege Cloud, CPM, PSM, PVWA, and PTA.
• Produce production-ready High-Level Designs (HLDs), Low-Level Designs (LLDs), and operational runbooks.
• Define and enforce vaulting strategies, credential lifecycle governance, session monitoring, and least-privilege policies.
• Integrate PAM solutions with Active Directory/LDAP, enterprise SIEM tools, and ITSM platforms.
• Conduct security posture and gap assessments aligned with ISO 27001 and NIST frameworks.

Key Requirements

• Demonstrable track record in an enterprise PAM Architect or Senior CyberArk SME role.
• Deep hands-on build and configuration experience with the CyberArk suite.
• Proven ability to author defence-grade HLD/LLD architecture documentation.
• Prior delivery experience within Defence, Aerospace, or high-assurance secure environments is highly desirable.
• CyberArk certifications (CDE, CDP, Sentry) or CISSP/CISM are advantageous.
• Must hold active UK DV clearance.