Privileged Access Management (PAM) Architect

Randstad Digital; Greater London; On-site; GBP 90,000 - 120,000; Full time

Job summary

Randstad Digital is seeking an experienced CyberArk PAM Architect & SME to lead design, deployment, and optimization of privileged access management across secure UK environments.

You will drive CyberArk deployments, create high-level and low-level designs, and collaborate with security, infrastructure and delivery teams, with on-site visits across the UK.

Qualifications

• Hands-on PAM Architect/SME with CyberArk PAS/CPM/PSM/PVWA expertise.
• Active UK Security Clearance (SC or higher) or eligibility.
• Experience in high-assurance or regulated environments (Defence/aerospace desirable).
• Desirable certifications: CyberArk CDE/CDP/Sentry or CISSP/CISM.

Responsibilities

• Lead end-to-end CyberArk deployments across complex on-premise and enterprise environments.
• Produce High-Level and Low-Level Designs, and security architecture docs with AD, SIEM, ITSM integration.
• Define privileged access policies, credential management, and session monitoring.
• Engage with security, infrastructure and delivery teams; visit customer sites for outcomes.

Skills

CyberArk PAM

PAM architecture

Security clearances

Tools

Active Directory

SIEM

ITSM

Job description

Overview

We are looking for an experienced CyberArk PAM Architect & SME to lead the design, implementation, and optimization of enterprise Privileged Access Management (PAM) solutions. Operating within high-assurance, secure UK environments, you will drive CyberArk deployments, produce detailed design documentation, and act as the technical SME across complex infrastructure.

Key Responsibilities

PAM Architecture & Deployment:

• Lead end-to-end CyberArk implementations (PAS, Privilege Cloud) across complex on-premise and enterprise environments.

Design & Integration:

• Produce High-Level Designs (HLDs), Low-Level Designs (LLDs), and security architecture documents while integrating CyberArk with Active Directory, SIEM, and ITSM tools.

Policy & Security Governance:

• Define privileged access policies, credential management, session monitoring, and conduct security gap analyses aligned to industry standards (NIST/ISO 27001).

Stakeholder & On-Site Engagement:

• Work directly with security, infrastructure, and delivery teams, visiting customer sites to ensure successful project outcomes and compliance.

Requirements

Technical Expertise:

• Hands-on experience as a PAM Architect/SME with deep CyberArk knowledge (PAS, CPM, PSM, PVWA).

Security Clearance & Location:

• Active UK Security Clearance (SC or higher) or eligibility, with full willingness to work on secure customer sites across the UK.

Domain Experience:

• Background in high-assurance or regulated environments (Defence and Aerospace sector experience is highly desirable).

Certifications (Desirable):

• CyberArk CDE/CDP/Sentry or CISSP/CISM certifications.