PAM Architect

Role Overview

We are seeking an experienced Privileged Access Management (PAM) Architect/Subject Matter Expert (SME) to support a major programme within a highly secure UK Defence environment.

The successful candidate will be responsible for the architecture, design, implementation and optimisation of enterprise-scale Privileged Access Management solutions, with a particular focus on CyberArk.

This role requires a combination of strategic architectural expertise, hands-on technical delivery and strong stakeholder engagement, working across complex, high-assurance environments.

Key Responsibilities

• Lead the architecture, design and implementation of CyberArk PAM solutions across complex, on-premise enterprise environments.
• Act as the technical Subject Matter Expert for Privileged Access Management, providing guidance on security best practices, standards and emerging technologies.
• Design, deploy and optimise CyberArk solutions, including Privileged Access Security (PAS), Privilege Cloud and associated components.
• Define and implement privileged access policies, credential lifecycle management, session monitoring and secure vaulting strategies.
• Produce comprehensive technical documentation, including High-Level Designs (HLDs), Low-Level Designs (LLDs), security architecture documentation and operational runbooks.
• Collaborate with security, infrastructure and application teams to integrate PAM controls into existing enterprise environments.
• Conduct security assessments, gap analyses and remediation activities aligned with recognised standards, including NIST and ISO 27001.
• Support security audits, regulatory compliance and governance requirements.
• Provide technical leadership, mentoring and guidance to internal engineering and security teams.
• Engage directly with stakeholders and attend secure customer sites as required to support successful delivery.
• Identify opportunities for continuous improvement, automation and enhanced security capabilities.

Essential Skills & Experience

• Proven experience working as a PAM Architect, CyberArk Architect or Senior PAM SME.
• Extensive hands-on experience designing, implementing and supporting enterprise CyberArk solutions.
• Strong technical knowledge of CyberArk components, including:
• Privileged Access Security (PAS)
• Central Policy Manager (CPM)
• Privileged Session Manager (PSM)
• Password Vault Web Access (PVWA)
• Privileged Threat Analytics (PTA)
• Demonstrable experience delivering enterprise-scale PAM architecture and implementations.
• Strong experience producing HLDs, LLDs, security architecture documents and implementation runbooks.
• In-depth understanding of Identity and Access Management (IAM), privileged credential lifecycle management and least privilege security principles.
• Experience implementing privileged session isolation, monitoring, recording and secure credential vaulting.
• Experience integrating CyberArk with Active Directory, LDAP, SIEM and ITSM platforms.
• Strong understanding of enterprise security frameworks, standards and compliance requirements.
• Excellent stakeholder engagement, communication and technical leadership skills.
• Ability to operate independently across both architectural design and hands-on implementation.

Desirable Skills & Experience

• Previous experience delivering PAM solutions within UK Defence, Aerospace or other highly regulated environments.
• Experience with CyberArk Privilege Cloud and cloud-based PAM capabilities.
• Familiarity with DevSecOps, automation and secrets management.
• Experience working within complex, high-assurance security environments.
• Knowledge of NIST, ISO 27001 and relevant security architecture frameworks.

Desirable Certifications

• CyberArk Certified Delivery Engineer (CDE)
• CyberArk Defender/Sentry
• CISSP or CISM
• TOGAF or equivalent architecture certification