Security Architect

Randstad Digital; Corsham; On-site; GBP 90,000 - 120,000; Full time

Job summary

Randstad Digital seeks a senior Privileged Access Management (PAM) Architect & SME with hands‑on CyberArk expertise to lead architecture and delivery across a high‑assurance UK defence programme. Onsite locations include Corsham, Farnborough, Preston or Erskine.

You will define privileged access governance, produce HLDs/LLDs, and integrate PAM with AD/LDAP, SIEM and ITSM while acting as the technical authority on secure client sites.

Qualifications

• Senior PAM architect with hands-on CyberArk deployment experience.
• Experience in high‑assurance Defence/Aerospace environments is highly desirable.
• Strong knowledge of privileged access governance and credential lifecycle.

Responsibilities

• Design and lead end-to-end PAM architecture and deployment.
• Produce architecture artefacts: HLDs, LLDs, runbooks.
• Integrate PAM with AD/LDAP, SIEM and ITSM.

Skills

PAM Architect

CyberArk

Senior SME

Security architecture

Active Directory/LDAP

SIEM

ITSM

Credential lifecycle

Governance

Security certifications

Education

CDE/CDP/Sentry

CISSP/CISM

Tools

CyberArk PAS

Privilege Cloud

CPM

PSM

PVWA

PTA

Job description

Hiring: CyberArk PAM Architect & SME (Active DV Clearance holder)

Location: Erksine or Farnborough or Preston or Corsham (Onsite)

Clearance: Active UK DV Clearance holder

We are seeking a senior Privileged Access Management (PAM) Architect & SME with hands‑on CyberArk expertise to lead high‑impact security architecture and deployment across a mission‑critical, high‑assurance UK defence programme.

This role blends strategic architectural governance with practical, end‑to‑end delivery and technical leadership.

Key Responsibilities:

• Lead the end-to-end architecture, design, and implementation of CyberArk PAM solutions (PAS, Privilege Cloud, CPM, PSM, PVWA, PTA).
• Produce comprehensive architecture artefacts: High-Level Designs (HLDs), Low-Level Designs (LLDs), and operational runbooks.
• Define privileged access governance, credential lifecycle management, session recording, and vaulting strategies.
• Integrate PAM solutions with enterprise ecosystems, including Active Directory/LDAP, SIEM systems, and ITSM platforms.
• Act as the technical authority and primary stakeholder lead across secure client sites.
• Proven enterprise experience as a PAM Architect or Senior CyberArk SME.
• Deep hands‑on build, configuration, and integration capability across the CyberArk suite.
• Track record delivering into high‑assurance, secure environments (Defence / Aerospace sector experience is highly desirable).
• CyberArk certifications (CDE / CDP / Sentry) and CISSP/CISM are advantageous.
• Strict Security Requirement: Must hold an active UK DV Clearance.