PAM Architect (CyberArk)

About the mandate

You strengthen privileged access security at a large organisation. You are the point of contact for the CyberArk platform and guide business and technical stakeholders through the intake, analysis and onboarding of applications, platforms and use cases for privileged access. You translate business, security and architecture needs into concrete integration patterns, so that access is controlled, traceable, compliant and scalable. You work closely with application architects, security officers, IAM/PAM squads, infrastructure teams and operational stakeholders. The assignment runs for 6 months, with a preferred start date of 2 November 2026 and partial remote working (3 days out of 5). You communicate fluently in English; knowledge of Dutch and/or French is an asset.

Responsibilities

• Managing the intake process for applications and platforms that need to be migrated to PAM or VAM (Vendor Access Management)
• Analysing application architectures together with architects and analysts and mapping all the integrations required for privileged access
• Assessing whether standard CyberArk integration patterns are sufficient or whether a custom approach is needed
• Drawing up and documenting requirements for safes, accounts, access groups, approval flows, session recording, password rotation and break-glass scenarios
• Translating security, compliance and audit requirements into practical PAM controls and onboarding decisions
• Supporting the PAM squad during implementation by clarifying requirements and validating design choices
• Contributing to the standardisation of onboarding patterns, reusable documentation, intake templates and decision criteria
• Guiding testing, UAT, rollout and handover to operations, and advising stakeholders on CyberArk

Must-haves

• At least 5 years of relevant experience in IAM, PAM, cybersecurity or enterprise architecture roles
• At least 3 years of practical experience with CyberArk in an enterprise environment
• Strong hands-on experience with Privileged Access Management concepts, operating models and implementation methods
• Thorough functional and technical knowledge of CyberArk, preferably EPV, PVWA, CPM, PSM, PSMP and CyberArk Remote Access
• Experience with PAM implementations in large or complex organisations
• Good knowledge of IAM, security architecture, privileged account lifecycle, least privilege, segregation of duties and auditability
• Experience documenting functional and technical requirements, architecture decisions and handover material
• Fluent English; bachelor's or master's degree in computer science, IT or cybersecurity, or equivalent experience

Nice-to-haves

• Experience with Vendor Access Management or Remote Privileged Access solutions
• CyberArk certifications
• Knowledge of ServiceNow, access request processes and approval flows
• Knowledge of NIS2, ISO 27001, audit controls and risk management
• Knowledge of Dutch and/or French

What the employer offers

• 6-month assignment at a large organisation
• Hybrid working with 3 days out of 5 from home
• Complex enterprise environment with a central role as an advisor