Location: London - Flexible Working
Contract: 6 months
Rate: £750–£800 per day inside IR35
We’re looking for a CyberArk Architect to step into a major PAM transformation with a professional services client.
This isn’t a BAU role, it’s a proper architecture-led programme where things need shaping, not just maintaining.
The environment is moving fast. There’s an existing on-prem setup, some capability sitting in BeyondTrust, but the direction is clear: CyberArk SaaS first. The programme needs someone who can define how that actually works end to end, not just at a product level but across the full enterprise landscape.
You’ll be the person pulling together the architecture across CyberArk cloud capabilities — SRS, SWS, SCA, Secure Infrastructure Access and making sure it all fits with what’s already in place.
What you’ll be doing:
* Owning the end-to-end CyberArk architecture across the programme
* Designing a cloud-first CyberArk SaaS solution while working out how it coexists with BeyondTrust on-prem
* Defining tenant strategy and environment separation (dev, test, prod) and how releases move through them
* Mapping out connectivity — gateways, network flows, access paths — making sure it all stands up securely
* Leading on identity and authentication design, including MFA and privileged access models
* Shaping session management and access controls properly, not just ticking boxes
* Building in resilience and availability from day one
There’s a big integration piece as well. You’ll need to join things up across:
* Directory services like Microsoft Entra ID and Active Directory
* ServiceNow
* Identity governance (Point Identity rather than IIQ)
* Logging and monitoring through Splunk and Datadog
* Cloud platforms across AWS and Azure
What matters here is that you’ve done this before. Not just CyberArk, but CyberArk in a modern, SaaS-led, enterprise environment where there are legacy constraints and multiple moving parts.
You’ll need to be comfortable operating at architect level defining, challenging, and bringing clarity where things are still forming. There are stakeholders across both the client and delivery side, so being able to communicate clearly and cut through noise is key.
If you’ve worked on large-scale PAM transformations, understand how CyberArk SaaS actually fits into a real-world architecture, and can bridge cloud and on-prem cleanly, this will land well.