CyberArk PAM Architect / CyberArk / Remote / London

We are looking for an experienced CyberArk PAM Architect to support a major enterprise security transformation programme within a global financial markets infrastructure organisation.

This organisation operates critical platforms used by banks, trading firms and financial institutions worldwide. As part of a large-scale identity and security modernisation initiative, they are implementing CyberArk SaaS/Privilege Cloud as the core Privileged Access Management (PAM) platform across a complex hybrid and multi-cloud estate.

This role requires someone who can design enterprise-scale PAM architecture, define integration patterns, and support governance within a highly regulated environment.

Key Responsibilities

• Define the end-to-end CyberArk PAM target architecture using CyberArk SaaS.

• Design privileged access models including Just-in-Time (JIT) access and session management.

• Architect integrations with enterprise systems including Entra ID, ServiceNow, SailPoint IdentityNow, Splunk and DataDog.

• Develop privileged access models across AWS and Azure environments.

• Produce architecture artefacts including HLD, LLD, SDD and solution design documentation.

• Define identity federation, MFA and authentication architecture.

• Design automation and onboarding frameworks including CI/CD integration.

• Define session recording, data retention and encryption models.

• Support security governance, architecture review and audit processes.

• Contribute to the implementation roadmap for the PAM transformation programme.

Technology Environment

• CyberArk Privilege Cloud/CyberArk SaaS

• Microsoft Entra ID (Azure AD)

• ServiceNow

• SailPoint IdentityNow

• AWS & Azure

• Splunk/DataDog

• Enterprise IAM & PAM tooling

Required Experience

• Strong experience working as a CyberArk Architect/PAM Architect.

• Deep knowledge of CyberArk Privilege Cloud or CyberArk SaaS architecture.

• Experience designing enterprise PAM solutions in large organisations.

• Experience integrating CyberArk with IAM platforms and enterprise systems.

• Strong knowledge of privileged access models, credential vaulting and session management.

• Experience working in regulated enterprise environments such as banking, financial services, insurance or large global organisations.

Desirable

• Experience delivering large-scale PAM transformation programmes.

• Experience with automation frameworks and CI/CD onboarding for PAM.

• Knowledge of security governance frameworks and audit requirements.

This is an opportunity to work on a high-profile enterprise security programme delivering a next-generation PAM capability within a complex global environment

Whilst advertised as remote working, there will be some requirement to attend site in London. It maybe required to attend a weekly meeting in London but even this maybe up for negotiation.

This is an Inside IR35 role. The indicative rate is advertised as £720 p/day but if you have the requisite skills and experience and are able to justify a higher day rate, still apply.