DV Cleared CyberArk PAM Architect/Privileged Access Management SME

As the Privileged Access Management (PAM) Architect & SME, you will lead the architecture, design and implementation of enterprise CyberArk solutions across complex on-premise environments.

Working closely with security, infrastructure and application teams, you will define privileged access strategies, implement security controls and ensure enterprise PAM capabilities align with industry best practice and regulatory standards.

Key Responsibilities

• Lead the architecture, design and deployment of CyberArk Privileged Access Management solutions.
• Act as the technical SME for CyberArk and enterprise PAM.
• Deliver enterprise CyberArk implementations including PAS, CPM, PSM, PVWA and Privilege Cloud.
• Design privileged credential management, vaulting and session monitoring solutions.
• Define privileged access policies and least privilege models.
• Integrate CyberArk with Active Directory, LDAP, SIEM and ITSM platforms.
• Conduct security assessments, gap analysis and remediation planning.
• Produce High Level Designs (HLDs), Low Level Designs (LLDs), security architecture documents and operational runbooks.
• Provide technical leadership and mentoring across engineering and security teams.
• Engage with customer stakeholders within secure environments to support successful project delivery.
• Drive continuous improvement and security best practice across the PAM estate.

• Proven experience as a CyberArk Architect, PAM Architect or Senior CyberArk SME.
• Strong hands-on expertise with:
• CyberArk PAS
• CPM
• PSM
• PVWA
• Privilege Cloud
• Experience designing and delivering enterprise-scale Privileged Access Management solutions.
• Strong understanding of Identity & Access Management (IAM) principles.
• Experience with privileged credential lifecycle management and session recording.
• Integration experience with:
• Active Directory
• LDAP
• SIEM platforms
• ITSM tools
• Experience producing HLDs, LLDs, security architecture documentation and implementation runbooks.
• Excellent stakeholder engagement and communication skills.

Desirable Skills

Experience with:

• DevSecOps
• Secrets Management
• Enterprise Security Architecture
• Defence or Aerospace programmes
• High Assurance or Secure Government environments

Certifications (Desirable)

• CyberArk Certified Delivery Engineer (CDE)
• CyberArk Defender (CDP)
• CyberArk Sentry
• CISSP
• CISM
• TOGAF

Security Requirements

• Current DV Clearance or higher is highly desirable.
• Candidates must be eligible to work within secure UK Government environments.
• Due to project restrictions, UK Nationals only. Unfortunately, dual nationals cannot be considered.
• Willingness to work on secure customer sites and travel within the UK as required.

We are supporting a leading global technology services organisation on a high-profile UK Government programme and are looking for an experienced CyberArk PAM Architect to join a specialist cyber security team delivering enterprise Privileged Access Management solutions within highly secure environments.