IAM Architect – CyberArk PAM Specialist (6‑month contract)

About the role

The client is seeking an experienced Identity and Access Management (IAM) Architect to lead the design, implementation and enhancement of CyberArk Privileged Access Management (PAM) and identity governance solutions across a complex enterprise environment. This is a 6‑month contract role based in London, providing technical leadership throughout the project lifecycle.

Key responsibilities

• Architect, design and deliver CyberArk PAM solutions across enterprise and hybrid environments, guiding build, test and transition phases.
• Produce and govern high‑quality solution architecture and technical design artefacts, securing approvals through architecture, change and design authority forums.
• Design and implement IAM integrations for provisioning, de‑provisioning, identity lifecycle management, SSO, MFA, JIT/JEA access models and application onboarding using standard connectors and APIs.
• Deliver and enhance identity governance capabilities, including JML processes, RBAC, least‑privilege controls, policy enforcement and compliance‑driven access management.
• Provide technical ownership of the IAM platform, covering troubleshooting, operational support, risk remediation, continuous improvement and roadmap delivery.
• Collaborate with security, architecture, infrastructure, networking and business stakeholders to raise IAM maturity and strengthen enterprise access management.

Required profile

• Extensive hands‑on experience designing, deploying and supporting CyberArk PAM solutions in large‑scale enterprises.
• Strong background in Identity and Access Management, including PAM, Identity Governance and Administration (IGA) and AAA frameworks.
• Proven ability to create, present and manage architectural and technical design documentation through formal governance and approval processes.
• Experience working with multiple stakeholders such as project managers, architects, security teams and business representatives.
• Deep understanding of identity lifecycle management, access governance, role‑based access control and privileged account management best practices.
• Excellent analytical, troubleshooting and problem‑solving skills.

Required skills

• CyberArk
• Identity and Access Management (IAM)
• Identity Governance and Administration (IGA)
• Privileged Access Management (PAM)
• Authentication, Authorization, Accounting (AAA)
• Single Sign‑On (SSO)
• Multi‑Factor Authentication (MFA)
• Just‑In‑Time (JIT) access
• Just‑Enough‑Administration (JEA)
• Role‑Based Access Control (RBAC)
• APIs
• Connectors
• Provisioning
• Deprovisioning