> Markdown version of [/jobs/ext/1981784-privileged-access-management-pam-architect](https://www.wearedevelopers.com/jobs/ext/1981784-privileged-access-management-pam-architect). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Privileged Access Management (PAM) Architect

- **Company:** Randstad UK
- **Location:** Erskine, UK
- **Contract:** Temporary contract
- **Skills:** Active Directory, High-Level Architecture, Identity and Access Management, Information Systems Security Architecture Professional, Key Management, Lightweight Directory Access Protocols (LDAP), Security Information and Event Management, Cyberark, Togaf, Sentry, Devsecops
- **Published:** August 8, 2026
- **Apply:** https://itjobpro.co.uk/job/privileged-access-management-pam-architect

## About the Role

Proven track record in a PAM Architect role within enterprise-scale environments.

Deep, hands-on technical expertise with CyberArk capabilities and architecture.

Strong understanding of Identity and Access Management (IAM) principles, privileged credential lifecycle management, and least privilege models.

Prior experience delivering secure systems into high-assurance, regulated sectors (Defence and/or Aerospace is highly desirable).

Familiarity with DevSecOps and secrets management is advantageous.

Desirable Certifications

CyberArk Certified Delivery Engineer (CDE) / Defender (CDP) / Sentry

CISSP, CISM, or equivalent security certifications

TOGAF or similar architecture frameworks

## Description

Architecture & Design: Lead the end-to-end architecture, design, and deployment of CyberArk PAM solutions (PAS, CPM, PSM, PVWA, PTA).

Documentation: Produce high-quality documentation, including High-Level Designs (HLDs), Low-Level Designs (LLDs), security architectures, and runbooks.

Implementation: Define and implement privileged access policies, credential management, session monitoring, and vaulting strategies.

Integration: Integrate PAM controls with existing enterprise environments, including Active Directory/LDAP, SIEM, and ITSM tools.

Leadership & Advisory: Act as the technical SME, providing mentorship to internal teams and advising on industry standards (NIST, ISO 27001).

Stakeholder Engagement: Engage directly with stakeholders, including visiting secure customer sites to build trusted relationships and ensure successful delivery.


## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [From Doubt to Confidence: How Sentry Uses Verdaccio to Bulletproof SDK Releases](https://www.wearedevelopers.com/videos/739-from-doubt-to-confidence-how-sentry-uses-verdaccio-to-bulletproof-sdk-releases)
- [Organizational Change Through The Power Of Why - DevSecOps Enablement](https://www.wearedevelopers.com/videos/478-organizational-change-through-the-power-of-why-devsecops-enablement)
- [Debugging in the Dark](https://www.wearedevelopers.com/videos/1658-debugging-in-the-dark)
- [Building Well-Architected applications](https://www.wearedevelopers.com/videos/691-building-well-architected-applications)
- [The Snowball Effect of Open Source](https://www.wearedevelopers.com/videos/523-the-snowball-effect-of-open-source)

## Related Articles

- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Dev Digest 191: Malware interviews, EU ❤️ Open Source and Skilled Agents](https://www.wearedevelopers.com/magazine/645-dev-digest-191-malware-interviews-eu-open-source-and-skilled-agents)
- [The top 200 passwords of 2024 can be cracked in less than a second](https://www.wearedevelopers.com/magazine/502-the-top-200-passwords-of-2024-can-be-cracked-in-less-than-a-second)
- [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)
- [Everything a Developer Needs to Know About MCP with Neo4j](https://www.wearedevelopers.com/magazine/604-everything-a-developer-needs-to-know-about-mcp-with-neo4j)
- [Dev Digest 164: AI Agents, AI Blindspots and MCP security problems](https://www.wearedevelopers.com/magazine/578-dev-digest-164-ai-agents-ai-blindspots-and-mcp-security-problems)