Privileged Access Management (PAM) Architect

Job Title: Privileged Access Management Architect

Contract :6 months

Location:Erskine , Scotland(5 days onsite)

Location:Corsham, UK(Hybrid -2 days a week)

We are seeking an experienced Privileged Access Management (PAM) Architect to lead the design, implementation, and optimization of enterprise PAM solutions, with a strong focus on CyberArk. You will play a critical role in securing critical systems and sensitive data within a highly secure, high-assurance environment.

• Clearance: Must hold an active, fully transferrable DV (Developed Vetting) Clearance.

• Nationality: Strictly UK Nationals only

• Architecture & Design: Lead the end-to-end architecture, design, and deployment of CyberArk PAM solutions (PAS, CPM, PSM, PVWA, PTA).

• Documentation: Produce high-quality documentation, including High-Level Designs (HLDs), Low-Level Designs (LLDs), security architectures, and runbooks.

• Implementation: Define and implement privileged access policies, credential management, session monitoring, and vaulting strategies.

• Integration: Integrate PAM controls with existing enterprise environments, including Active Directory/LDAP, SIEM, and ITSM tools.

• Leadership & Advisory: Act as the technical SME, providing mentorship to internal teams and advising on industry standards (NIST, ISO 27001).

• Stakeholder Engagement: Engage directly with stakeholders, including visiting secure customer sites to build trusted relationships and ensure successful delivery.

• Proven track record in a PAM Architect role within enterprise-scale environments.

• Deep, hands-on technical expertise with CyberArk capabilities and architecture.

• Strong understanding of Identity and Access Management (IAM) principles, privileged credential lifecycle management, and least privilege models.

• Prior experience delivering secure systems into high-assurance, regulated sectors (Defence and/or Aerospace is highly desirable).

• Familiarity with DevSecOps and secrets management is advantageous.

• CyberArk Certified Delivery Engineer (CDE) / Defender (CDP) / Sentry

• CISSP, CISM, or equivalent security certifications

• TOGAF or similar architecture frameworks

If interested please reply with your CV to [email removed] or call me at [phone removed].

Randstad Technologies is acting as an Employment Business in relation to this vacancy.