£950 Per day
Inside
Remote
London
Summary: The CyberArk PAM Self-Hosted Architect role is a senior position focused on defining and delivering enterprise-grade Privileged Access Management (PAM) and secrets-management platforms within secure environments. The ideal candidate will take ownership of architectural strategy and design, collaborating with various teams to ensure best practices in implementation. This fully remote role requires SC clearance eligibility and is suited for an expert who can influence stakeholders and guide delivery teams effectively. The position demands extensive experience in cybersecurity architecture, particularly with CyberArk technologies.
Key Responsibilities:
- Own the end-to-end architecture and high-level design for CyberArk PAM Self-Hosted and CyberArk Conjur.
- Establish and maintain reference architectures, patterns, and standards for onboarding infrastructure, applications, DevOps platforms, and third parties into CyberArk.
- Architect CyberArk PAM Self-Hosted components ensuring resilience, scalability, operational segregation, and regulatory compliance.
- Design CyberArk Conjur / Secrets Manager Enterprise & Credential Provider for secure management of application, machine, and DevOps secrets.
- Collaborate with security, DevOps, and infrastructure teams to integrate CyberArk with identity providers, SIEM, ITSM, and MFA solutions.
- Lead installation, configuration, testing, and handover of CyberArk secrets-management solutions into Run & Maintain teams.
- Provide architectural leadership on privileged access risk reduction through threat modelling and adherence to security policies.
- Act as a trusted advisor to senior stakeholders, translating complex PAM/secret-management designs into clear business outcomes.
Key Skills:
- 7+ years' experience in cybersecurity architecture with strong PAM expertise.
- Proven hands-on architectural experience with CyberArk PAM Self-Hosted.
- Strong experience designing and integrating CyberArk Conjur / Credential Provider.
- Demonstrable experience integrating CyberArk with AD/LDAP, SAML/OIDC, SIEM tools, ITSM systems, and MFA platforms.
- Solid understanding of DevOps and cloud-native ecosystems.
- Strong awareness of security and audit standards.
- Excellent communication and stakeholder management skills.
- Experience working in secure, classified, or national security environments.
- Strong documentation skills.
- Proven track record leading and delivering multiple CyberArk PAM and secrets-management projects.
Salary (Rate): £950 per day
City: London
Country: United Kingdom
Working Arrangements: remote
IR35 Status: inside IR35
Seniority Level: Senior
Industry: IT
CyberArk PAM Self-Hosted Architect
+6 months +
+Fully remote working
+SC cleared role - must be elligible for clearance
Are you an experienced CyberArk Architect who can define and deliver enterprise-grade PAM and secrets-management platforms in secure, complex environments? We are seeking a highly skilled CyberArk PAM Self-Hosted Architect to take ownership of architectural strategy, design and integration across a major organisation.
This role is ideal for a senior expert who thrives on shaping security platforms, influencing stakeholders, and guiding delivery teams through best-practice implementation.
Responsibilities:
Own the end-to-end architecture and high-level design for CyberArk PAM Self-Hosted and CyberArk Conjur, defining these as strategic platforms for privileged access and secrets management.
Establish and maintain reference architectures, patterns, and standards for onboarding infrastructure, applications, DevOps platforms and third parties into CyberArk.
Architect CyberArk PAM Self-Hosted components-Vault, PVWA, PSM, CPM, PSMP, PTA, DR-ensuring resilience, scalability, operational segregation and regulatory compliance.
Design CyberArk Conjur / Secrets Manager Enterprise & Credential Provider for secure management of application, machine and DevOps secrets, integrating with:
CI/CD pipelines
Containers and Kubernetes/OpenShift
Multi-cloud platforms
Collaborate with security, DevOps and infrastructure teams to integrate CyberArk with AD/LDAP, SAML/OIDC identity providers, SIEM (e.g. Splunk), ITSM, and MFA solutions.
Lead installation, configuration, testing and handover of CyberArk secrets-management solutions into Run & Maintain teams.
Provide architectural leadership on privileged access risk reduction through threat modelling, control selection and adherence to security policies.
Act as a trusted advisor to senior stakeholders (CISO, security architects, platform owners, programme leadership), translating complex PAM/secret-management designs into clear business outcomes.
Required skills:
Typically 7+ years' experience in cybersecurity architecture, with strong PAM expertise in complex and regulated environments.
Proven hands-on architectural experience with CyberArk PAM Self-Hosted, including most of: Vault, PVWA, PSM, CPM, PSMP, PTA, DR.
Strong experience designing and integrating CyberArk Conjur / Credential Provider for application and DevOps secrets.
Demonstrable experience integrating CyberArk with:
AD/LDAP
SAML/OIDC identity providers
SIEM tools
ITSM/ticketing systems
At least one MFA platform
Solid understanding of DevOps and cloud-native ecosystems, including Kubernetes, OpenShift, containers, Jenkins, CI/CD and IaC, and embedding CyberArk Conjur into these pipelines.
Strong awareness of security and audit standards (NCSC, ISO 27001, NIST, FCA/financial, government).
Excellent communication and stakeholder management skills, able to articulate PAM and secrets architecture to both technical and non-technical audiences.
Experience working in or with secure, classified or national security environments.
Strong documentation skills (HLDs, LLDs, design patterns, architecture decisions).
Proven track record leading and delivering multiple CyberArk PAM and secrets-management projects.
If you'd like to discuss this CyberArk PAM Self-Hosted Architect in more detail, please send your updated CV to chloe.manerowkski@cbsbutler.com and I will get in touch.