CyberArk Architect

CyberArk Architect x2

+6-12 months +

+On site in Farnborough or Newcastle or Erskine

+DV cleared role - current active clearance is essential

+Inside IR35

+£550 - £700 a day

We are seeking an experienced CyberArk Architect / Privileged Access Management (PAM) SME to support a major Defence and MOD programme. This is an excellent contract opportunity for a technically strong architect with extensive CyberArk expertise and experience delivering secure enterprise solutions within highly sensitive environments.

You will lead the architecture, design, implementation and optimisation of enterprise Privileged Access Management solutions, helping to protect critical systems, privileged credentials and sensitive data across complex infrastructure environments.

Working closely with security, infrastructure and application teams, you will provide technical leadership and hands-on delivery, engaging directly with stakeholders across customer and supplier sites.

Key Responsibilities

Lead the architecture, design and implementation of enterprise-scale CyberArk PAM solutions.

Act as the technical SME for Privileged Access Management, advising on architecture, best practice and security standards.

Deliver end-to-end CyberArk deployments, including Privileged Access Security (PAS), Privilege Cloud and associated components.

Design and implement privileged access policies, credential management, vaulting, session monitoring and least-privilege controls.

Integrate CyberArk solutions with Active Directory, LDAP, SIEM and ITSM platforms.

Produce high-quality technical documentation, including High-Level Designs (HLDs), Low-Level Designs (LLDs), security architecture documentation and implementation runbooks.

Conduct security assessments, identify gaps and recommend remediation activities.

Support security audits and compliance requirements within secure, high-assurance environments.

Provide technical leadership and guidance to engineering teams and key stakeholders.

Work on-site with customer and supplier teams to ensure successful implementation and delivery.

Essential Skills & Experience

Proven experience as a CyberArk Architect, PAM Architect or Senior PAM SME.

Strong hands-on expertise in CyberArk, including PAS, CPM, PSM and PVWA; PTA experience is advantageous.

Experience designing and delivering complex, enterprise-scale PAM solutions.

Strong understanding of Identity and Access Management (IAM), privileged credential lifecycle management, session isolation and session recording.

Demonstrable experience producing HLDs, LLDs and security architecture documentation.

Experience integrating CyberArk with enterprise infrastructure and security tooling.

Strong knowledge of security architecture principles, access controls and secure system design.

Excellent stakeholder management and communication skills.

Previous experience supporting MOD, Defence or other highly secure environments.

Security & Eligibility Requirements

Active DV clearance is essential.

Must be a sole British national.

Must be willing and able to work on-site at Farnborough, Newcastle or Erskine.

Experience delivering solutions within secure Defence or MOD environments is required.

Desirable

CyberArk certifications, such as Defender, Sentry or Certified Delivery Engineer.

Experience with DevSecOps and secrets management.

CISSP, CISM or equivalent security qualifications.

TOGAF or other enterprise architecture frameworks.

if you'd like to discuss this CyberArk Architect in more detail, please send your updated CV to (url removed) and I will get in touch
Only candidates based in UK and eligible to work in UK are allowed