Privileged Access Manager

Randstad Technologies Recruitment; Corsham; On-site; GBP 90,000 - 120,000; Full time

Job summary

Randstad Technologies Recruitment is hiring a Privileged Access Manager to lead the design, implementation, and optimization of enterprise PAM solutions, with a strong CyberArk focus, for a 6-month contract.

Based in Corsham with a hybrid setup (2 days on-site), the role requires active DV clearance, UK nationality, and collaboration across secure enterprise environments and customer sites.

Qualifications

• Active DV clearance (Developed Vetting) required.
• UK national only.
• Senior SME with enterprise-scale PAM experience.

Responsibilities

• Lead end-to-end architecture, design, and deployment of CyberArk PAM solutions (PAS, CPM, PSM, PVWA, PTA).
• Produce High-Level Designs (HLDs) and Low-Level Designs (LLDs) and runbooks.
• Define and implement privileged access policies, credential management, and vaulting strategies.
• Integrate PAM controls with AD/LDAP, SIEM, and ITSM tools.
• Serve as technical SME, mentoring teams and advising on standards (NIST/ISO 27001).
• Engage stakeholders, including visiting secure customer sites, to ensure delivery.

Skills

CyberArk expertise

IAM principles

Privileged access management

DevSecOps

Tools

CyberArk PAS

CyberArk CPM

CyberArk PSM

CyberArk PVWA

CyberArk PTA

Job description

Job Title: Privileged Access Manager

Contract :6 months

Location: Erskine , Scotland(5 days onsite)

Location: Corsham, UK(Hybrid -2 days a week)

The Opportunity

We are seeking an experienced Privileged Access Management (PAM) Architect to lead the design, implementation, and optimization of enterprise PAM solutions, with a strong focus on CyberArk. You will play a critical role in securing critical systems and sensitive data within a highly secure, high-assurance environment.

Mandatory Security Requirements

Clearance: Must hold an active, fully transferrable DV (Developed Vetting) Clearance.

Nationality: Strictly UK Nationals only

Key Responsibilities

• Architecture & Design: Lead the end-to-end architecture, design, and deployment of CyberArk PAM solutions (PAS, CPM, PSM, PVWA, PTA).
• Documentation: Produce high-quality documentation, including High-Level Designs (HLDs), Low-Level Designs (LLDs), security architectures, and runbooks.
• Implementation: Define and implement privileged access policies, credential management, session monitoring, and vaulting strategies.
• Integration: Integrate PAM controls with existing enterprise environments, including Active Directory/LDAP, SIEM, and ITSM tools.
• Leadership & Advisory: Act as the technical SME, providing mentorship to internal teams and advising on industry standards (NIST, ISO 27001).
• Stakeholder Engagement: Engage directly with stakeholders, including visiting secure customer sites to build trusted relationships and ensure successful delivery.

Required Skills & Experience

• Proven track record in a Senior SME role within enterprise-scale environments.
• Deep, hands-on technical expertise with CyberArk capabilities and architecture.
• Strong understanding of Identity and Access Management (IAM) principles, privileged credential lifecycle management, and least privilege models.
• Prior experience delivering secure systems into high-assurance, regulated sectors (Defence and/or Aerospace is highly desirable).
• Familiarity with DevSecOps and secrets management is advantageous.

Desirable Certifications

• CyberArk Certified Delivery Engineer (CDE) / Defender (CDP) / Sentry
• CISSP, CISM, or equivalent security certifications
• TOGAF or similar architecture frameworks