PAM Architect

Job title: Privileged Access Management (PAM) Architect/SME - CyberArk

Location: UK-Based - Travel to secure customer sites required

Contract Duration: Until March 2027, with potential for extension

Rate: Competitive/Negotiable depending on experience

Clearance Required: Active DV Clearance Mandatory

IR35 Status: Inside IR35

Role Overview:

We are seeking an experienced Privileged Access Management (PAM) Architect/Subject Matter Expert (SME) to support a major programme within a highly secure UK Defence environment.

The successful candidate will be responsible for the architecture, design, implementation and optimisation of enterprise-scale Privileged Access Management solutions, with a particular focus on CyberArk.

This role requires a combination of strategic architectural expertise, hands-on technical delivery and strong stakeholder engagement, working across complex, high-assurance environments.

Key Responsibilities:

• Lead the architecture, design and implementation of CyberArk PAM solutions across complex, on-premise enterprise environments.
• Act as the technical Subject Matter Expert for Privileged Access Management, providing guidance on security best practices, standards and emerging technologies.
• Design, deploy and optimise CyberArk solutions, including Privileged Access Security (PAS), Privilege Cloud and associated components.
• Define and implement privileged access policies, credential life cycle management, session monitoring and secure vaulting strategies.
• Produce comprehensive technical documentation, including High-Level Designs (HLDs), Low-Level Designs (LLDs), security architecture documentation and operational runbooks.
• Collaborate with security, infrastructure and application teams to integrate PAM controls into existing enterprise environments.
• Conduct security assessments, gap analyses and remediation activities aligned with recognised standards, including NIST and ISO 27001.
• Support security audits, regulatory compliance and governance requirements.
• Provide technical leadership, mentoring and guidance to internal engineering and security teams.
• Engage directly with stakeholders and attend secure customer sites as required to support successful delivery.
• Identify opportunities for continuous improvement, automation and enhanced security capabilities.

Essential Skills & Experience:

• Proven experience working as a PAM Architect, CyberArk Architect or Senior PAM SME.
• Extensive hands-on experience designing, implementing and supporting enterprise CyberArk solutions.
• Strong technical knowledge of CyberArk components, including:
• Privileged Access Security (PAS)
• Central Policy Manager (CPM)
• Privileged Session Manager (PSM)
• Password Vault Web Access (PVWA)
• Privileged Threat Analytics (PTA)
• Demonstrable experience delivering enterprise-scale PAM architecture and implementations.
• Strong experience producing HLDs, LLDs, security architecture documents and implementation runbooks.
• In-depth understanding of Identity and Access Management (IAM), privileged credential life cycle management and least privilege security principles.
• Experience implementing privileged session isolation, monitoring, recording and secure credential vaulting.
• Experience integrating CyberArk with Active Directory, LDAP, SIEM and ITSM platforms.
• Strong understanding of enterprise security frameworks, standards and compliance requirements.
• Excellent stakeholder engagement, communication and technical leadership skills.
• Ability to operate independently across both architectural design and hands-on implementation.

Desirable Skills & Experience:

• Previous experience delivering PAM solutions within UK Defence, Aerospace or other highly regulated environments.
• Experience with CyberArk Privilege Cloud and cloud-based PAM capabilities.
• Familiarity with DevSecOps, automation and secrets management.
• Experience working within complex, high-assurance security environments.
• Knowledge of NIST, ISO 27001 and relevant security architecture frameworks.

Desirable Certifications:

• CyberArk Certified Delivery Engineer (CDE)
• CyberArk Defender/Sentry
• CISSP or CISM
• TOGAF or equivalent architecture certification

If you are available and interested in this opportunity, please apply for further information. Please note that due to high volumes of applications we are unable to contact every applicant. If you do not hear back from us within 7 days of sending your application, please assume that you have not been successful on this occasion.

At Lucid, we celebrate difference and value diverse perspectives, underpinned by our values 'Honesty, Integrity and Pragmatism'. We are proud to provide equal opportunities in line with our Diversity and Inclusion policy and welcome applications from all suitably qualified or experienced people, regardless of personal characteristics. If you have a disability or health condition and seek support throughout the recruitment process, please do not hesitate to contact us via the details below.