Cyberark SME - PAM Architect

PAM Architect/CyberArk SME

+ Contract | Approximately 6 months | UK Secure Sites | Active SC or Higher Clearance

+ Role can be based out of: Newcastle, Hampshire, Erskine

+ Requires travel to Corsham (expensed)

+ Rate: to £91 p/hour Inside IR35

+ DV Clearance required

We are seeking an experienced Privileged Access Management (PAM) Architect/SME with strong hands-on CyberArk expertise to lead the design and delivery of enterprise PAM solutions within a secure, high-assurance environment.

Working on a major secure technology programme, you will provide technical leadership across PAM architecture, implementation and optimisation, helping to protect privileged accounts, critical systems and sensitive data. The role involves working across DXC and customer premises, engaging directly with technical teams and stakeholders.

Key Responsibilities

• Lead the architecture, design and implementation of enterprise CyberArk PAM solutions.

• Provide technical SME expertise across CyberArk PAS, CPM, PSM and PVWA, with PTA desirable.

• Deliver end-to-end CyberArk deployments, including Privilege Cloud where applicable.

• Design privileged access policies, credential management, vaulting, session monitoring and least-privilege controls.

• Produce high-quality HLDs, LLDs, security architecture documentation and implementation runbooks.

• Integrate PAM solutions with Active Directory/LDAP, SIEM and ITSM platforms.

• Conduct security assessments, identify gaps and recommend remediation.

• Support audit, compliance and security assurance requirements.

• Provide technical leadership, mentoring and stakeholder engagement across secure customer environments.

Essential Skills & Experience

• Proven experience as a PAM Architect, CyberArk Architect or Senior CyberArk SME.

• Strong hands-on CyberArk expertise, particularly PAS, CPM, PSM and PVWA.

• Experience designing and delivering enterprise-scale PAM solutions.

• Strong understanding of IAM, privileged credential life cycle management, session isolation and recording, and least-privilege principles.

• Proven experience producing HLDs, LLDs and technical security documentation.

• Experience integrating CyberArk with enterprise infrastructure and security tooling.

• Excellent technical leadership, problem-solving and stakeholder management skills.

Desirable Experience

• Defence, aerospace or other highly secure, regulated environments.

• Familiarity with DevSecOps and secrets management.

• CyberArk certifications, such as Defender, Sentry or Certified Delivery Engineer.

• CISSP, CISM, TOGAF or equivalent certifications.