8 jobs found

PAM Architect +9 months + +DV cleared - current active clearance +Sole British nationals only due to the nature of the project +Hybrid working in Corsham +Inside IR35 + 500 - 550 a day Key Responsibilities Architect and deliver enterprise CyberArk PAM solutions , including PAS, CPM, PSM and PVWA Define privileged access, credential management, vaulting and session monitoring strategies Produce HLDs, LLDs, security architecture documentation and implementation runbooks Integrate CyberArk with Active Directory/LDAP, SIEM and ITSM platforms Conduct security assessments, gap analysis and remediation activities Provide PAM technical leadership, guidance and mentoring Work closely with customer and internal stakeholders, including on-site customer engagement Drive continuous improvement and innovation across the PAM capability Key Skills & Experience Proven experience as a PAM Architect or Senior PAM SME Strong hands-on CyberArk experience, ideally across PAS, CPM, PSM, PVWA and PTA Enterprise-scale PAM architecture and implementation experience Strong understanding of IAM, least privilege and privileged credential lifecycle management Experience with session isolation/recording and secure access controls Strong technical documentation and security architecture skills Knowledge of NIST, ISO 27001 or similar security frameworks Excellent stakeholder management and communication skills Experience of DevSecOps and secrets management would be advantageous If you'd like to discuss this PAM Architect in more detail, please send your updated CV to (url removed) and I will get in touch.

We are supporting a leading global technology services organisation on a high-profile UK Government programme and are looking for an experienced CyberArk PAM Architect to join a specialist cyber security team delivering enterprise Privileged Access Management solutions within highly secure environments. This is an excellent opportunity for a senior security professional with deep expertise in CyberArk, Privileged Access Management (PAM), Identity & Access Management (IAM) and enterprise security architecture to play a key role in securing critical infrastructure supporting defence and government systems. The Role As the Privileged Access Management (PAM) Architect & SME , you will lead the architecture, design and implementation of enterprise CyberArk solutions across complex on-premise environments. Working closely with security, infrastructure and application teams, you will define privileged access strategies, implement security controls and ensure enterprise PAM capabilities align with industry best practice and regulatory standards. Key Responsibilities Lead the architecture, design and deployment of CyberArk Privileged Access Management solutions. Act as the technical SME for CyberArk and enterprise PAM. Deliver enterprise CyberArk implementations including PAS, CPM, PSM, PVWA and Privilege Cloud. Design privileged credential management, vaulting and session monitoring solutions. Define privileged access policies and least privilege models. Integrate CyberArk with Active Directory, LDAP, SIEM and ITSM platforms. Conduct security assessments, gap analysis and remediation planning. Produce High Level Designs (HLDs), Low Level Designs (LLDs), security architecture documents and operational runbooks. Provide technical leadership and mentoring across engineering and security teams. Engage with customer stakeholders within secure environments to support successful project delivery. Drive continuous improvement and security best practice across the PAM estate. Essential Skills & Experience Proven experience as a CyberArk Architect , PAM Architect or Senior CyberArk SME. Strong hands-on expertise with: CyberArk PAS CPM PSM PVWA Privilege Cloud Experience designing and delivering enterprise-scale Privileged Access Management solutions. Strong understanding of Identity & Access Management (IAM) principles. Experience with privileged credential life cycle management and session recording. Integration experience with: Active Directory LDAP SIEM platforms ITSM tools Experience producing HLDs, LLDs, security architecture documentation and implementation runbooks. Excellent stakeholder engagement and communication skills. Desirable Skills Experience with: DevSecOps Secrets Management Enterprise Security Architecture Defence or Aerospace programmes High Assurance or Secure Government environments Certifications (Desirable) CyberArk Certified Delivery Engineer (CDE) CyberArk Defender (CDP) CyberArk Sentry CISSP CISM TOGAF Security Requirements Current DV Clearance or higher is highly desirable. Candidates must be eligible to work within secure UK Government environments. Due to project restrictions, UK Nationals only . Unfortunately, dual nationals cannot be considered. Willingness to work on secure customer sites and travel within the UK as required.

AD SME +9 months + +Hybrid Corsham +DV cleared - current active clearance is essential +Sole British nationals only due to nature of the project +Inside IR35 We are seeking an experienced Microsoft Active Directory SME to support the design, implementation and optimisation of secure enterprise identity services within a high-assurance environment. Key Responsibilities Provide technical leadership across Microsoft Active Directory environments. Design and manage domains, forests, trusts, replication and Group Policy . Develop secure tiered administration and privileged access models. Support ADFS, authentication and identity integrations . Conduct AD health checks, security assessments and remediation. Troubleshoot complex identity issues and provide root cause analysis. Produce HLDs, LLDs and technical documentation . Work closely with technical leads, security teams and customers on-site. Essential Skills Extensive Active Directory architecture and hands-on experience. Strong Group Policy, DNS and DHCP knowledge. Experience with PAM, PAWs and least-privilege security models . Knowledge of Kerberos, NTLM, LDAP, SAML and OAuth . Strong PowerShell Scripting and automation skills. Experience in secure/regulated environments. Defence or Aerospace experience desirable. Active DV clearance is essential. If you'd like to discuss the AD SME in more detail, please send your updated CV to (see below) and I will get in touch.

Role: Digital Workplace Lead Architect Location: Cheltenham Duration: 6 months Clearance: DV We are looking for an experienced Digital Workplace Lead Architect to define and govern the end-to-end Digital Workplace and End User Computing (EUC) architecture within a secure, enterprise-scale environment. Key Responsibilities Own Digital Workplace and EUC architecture, standards and design authority. Define secure, scalable solutions across devices, endpoint management, identity, collaboration and service management. Ensure alignment with Zero Trust, security accreditation and operational requirements. Provide architectural leadership across transition, transformation and BAU delivery. Drive standardisation, automation and service efficiency. Skills & Experience Proven experience leading Digital Workplace and EUC architecture in complex organisations. Strong knowledge of Windows 10/11, Intune, Configuration Manager, Active Directory/Entra ID and Microsoft 365. Expertise in Zero Trust, endpoint security, ITIL, ServiceNow and security assurance frameworks. Experience working in highly secure, regulated or Defence/Government environments is highly desirable. What You'll Bring A strategic mindset, strong technical leadership, and the ability to deliver secure, resilient and user-focused workplace services through large-scale transformation programmes. Reasonable Adjustments: Respect and equality are core values to us. We are proud of the diverse and inclusive community we have built, and we welcome applications from people of all backgrounds and perspectives. Our success is driven by our people, united by the spirit of partnership to deliver the best resourcing solutions for our clients. If you need any help or adjustments during the recruitment process for any reason , please let us know when you apply or talk to the recruiters directly so we can support you.

IDAM Architect - DV Cleared Location: Farnborough, Hampshire, UK Employment Type: Permanent, Full-Time Security Clearance: Developed Vetting (DV) - Essential Salary: £70,000 - £85,000 + Benefits About the Role The IDAM (Identity, Access and Data Management) Architect designs, governs and implements enterprise-scale identity and access management solutions for defence and aerospace environments. You will architect secure authentication, authorisation and identity governance frameworks, lead IDAM modernisation programmes, and ensure compliance with stringent defence security and regulatory requirements. This role demands deep expertise in identity platforms, security architecture and MOD-compliant IDAM design. Key Responsibilities IDAM Architecture & Strategy Design enterprise-scale identity and access management architectures supporting defence operations Architect secure authentication, multi-factor authentication (MFA) and authorisation frameworks Design role-based access control (RBAC), attribute-based access control (ABAC) and privilege access management (PAM) solutions Develop identity governance, access life cycle management and entitlement management strategies Lead IDAM technology evaluation and vendor selection processes Security & Compliance Ensure IDAM architectures comply with MOD Classification Guides, Defence Security Policy and ITAR regulations Design identity solutions supporting defence contractor personnel vetting (PRF) requirements Architect data protection and encryption strategies aligned with defence security standards Lead security risk assessments for IDAM systems and vulnerabilities Design audit and logging capabilities supporting MOD compliance and forensic requirements IDAM Modernisation & Implementation Lead design and implementation of modern IDAM platforms (AD/Azure AD, Okta, Ping, ForgeRock) Design cloud-ready and hybrid identity solutions supporting multi-cloud environments Guide API-driven identity architecture and microservices-based identity solutions Lead IDAM system migrations and technology modernisation programmes Technical Leadership & Governance Lead IDAM technical teams and provide architectural mentoring Establish IDAM design standards, architecture patterns and operational governance Drive technical decision-making through IDAM design reviews Document IDAM architecture decisions and design specifications Integration & Operations Design IDAM integration with enterprise applications, systems and cloud platforms Architect identity federation, single sign-on (SSO) and cross-domain authentication Support IDAM operational readiness, performance monitoring and incident response Establish IDAM life cycle management and continuous improvement processes Customer & Stakeholder Engagement Serve as technical authority for IDAM architecture discussions with customer leadership Present identity and access management recommendations to defence programme teams Lead IDAM design workshops and customer validation activities Essential Requirements Experience & Expertise Minimum 12 years' identity and access management experience with 5+ years in architecture role Proven experience designing enterprise-scale IDAM solutions Strong background in defence, aerospace or government IDAM programmes Demonstrated expertise with modern identity platforms (Azure AD, Okta, Ping, ForgeRock) Track record of leading IDAM modernisation and technology transformation programmes Technical Knowledge Deep expertise in IDAM architecture patterns, methodologies and best practices Expert-level knowledge of identity technologies including LDAP, Active Directory, OAuth, SAML and OpenID Connect Strong understanding of Azure AD, Office 365 identity, hybrid identity and cloud-native identity solutions Proficiency in privilege access management (PAM), role/attribute-based access control (RBAC/ABAC) Knowledge of identity governance, access certification and entitlement management Expertise in API security, service-to-service authentication and microservices identity Familiarity with MOD security requirements, Classification Guides and defence compliance Understanding of cryptography, encryption and security protocols Personal Attributes Exceptional strategic thinking with strong technical depth Outstanding communication and stakeholder engagement skills Strong problem-solving and analytical capabilities Proven ability to lead technical teams and influence senior stakeholders Commitment to security and compliance excellence Desirable Requirements Experience with defence or aerospace IDAM programmes CISSP, CISM or equivalent security certifications Azure AD or Okta advanced certifications Experience with identity-driven security and zero-trust architecture Knowledge of ITAR compliance and export controls Reasonable Adjustments: Respect and equality are core values to us. We are proud of the diverse and inclusive community we have built, and we welcome applications from people of all backgrounds and perspectives. Our success is driven by our people, united by the spirit of partnership to deliver the best resourcing solutions for our clients. If you need any help or adjustments during the recruitment process for any reason , please let us know when you apply or talk to the recruiters directly so we can support you.

Microsoft Active Directory Architect Contract: 7 months initially IR35: Inside IR35 Clearance: DV Clearance Eligibility: Sole British National Location: Two days on site per week. Erskine preferred; candidates based near Farnborough or Newcastle may also be considered, with attendance at Corsham required twice weekly. Role Overview We are seeking an experienced Microsoft Active Directory Architect to design, implement and optimise secure, enterprise-scale AD environments. The successful candidate will act as the technical SME, providing both strategic and hands-on expertise across Active Directory architecture, identity services and security design. Key Responsibilities Design and evolve on-premises AD environments, including domains, forests, trusts and replication. Develop and manage secure Group Policy strategies. Design identity integrations, including ADFS. Implement tiered administration, least-privilege access, PAWs and PAM solutions. Conduct AD health checks, security assessments and remediation activities. Support identity-related incident resolution and root-cause analysis. Produce HLDs, LLDs, security documentation and operational runbooks. Integrate AD with enterprise security and monitoring tools, including SIEM platforms. Work with technical, security, infrastructure and customer stakeholders to deliver solutions. Required Experience Proven experience as an Active Directory Architect or Senior SME. Strong hands-on expertise in Microsoft AD, including multi-domain and multi-forest environments. Extensive knowledge of Group Policy, DNS and DHCP. Experience designing enterprise-scale AD environments. Knowledge of Kerberos, NTLM, LDAP, SAML and OAuth. PowerShell Scripting and automation experience. Strong understanding of identity security and privileged access controls. Excellent communication, stakeholder engagement and documentation skills. Ability to work independently in secure, customer-facing environments. Please note: Current DV Clearance and sole British nationality are essential requirements.

Identity Architect (SC Cleared) Corsham (Hybrid) Permanent £90,000 - £115,000 (DOE) + Benefits Identity Architect needed with active SC Security Clearance for a permanent career opportunity in Corsham (Hybrid). Hybrid Working - 3 days/week remote (WFH) + 2 days/week working on-site in Corsham (Wiltshire). A chance to work with a leading global IT transformation on a large-scale Government project. Start ASAP in Summer 2026. IAM/IDM Architect who can take ownership of architecture, provide technical leadership + guide the team from design to implementation. In-depth Identity and Access Management (IAM/IDM) architecture experience is essential, including leading IAM platforms like: OpenText, Net IQ, SailPoint, Okta, CyberArk, ForgeRock + MS Entra. Owning the end-to-end IAM/IDM architecture across development, data + service support workstreams. Providing technical direction across identity workflows, lifecycle processes, integrations, data flows, platform behaviour +operational supportability. Leading Identity Architecture including identity designs, including schemas, attributes, data models, workflow rules, provisioning logic and integration behaviour. Excellent Stakeholder Management skills including working across application development, data, infrastructure, service operations + supplier teams. Technical Skills: identity schemas, data flows, attributes, APIs, microservices, integration patterns, identity lifecycle, workflows, integration patterns, platform configuration + live-service supportability. Advantageous: Azure AD, M365 identity integration, AWS, API Gateway, LDAP, Directory Services, data feeds, workflow engines, ETL, enterprise integration. Active SC Security Clearance i s essential for this position. Benefits: £90-115k Salary (DOE) + Hybrid Working + 10% Bonus + Pension + 22 days holiday + BHs (rising to 25 days) + Death in Service + Health Care Plan

VMware Architect - DV Cleared Location: South West (100% On-site) Contract: Initial 12 Months+ Start: September 2026 Rate: 700 to 720 per day - Inside IR35 We are looking for an experienced VMWare Architect to join a secure programme delivering enterprise infrastructure solutions within a high-security environment. This role requires a hands-on architect with strong experience across VMware, networking, identity management, and secure infrastructure design. Key Responsibilities Design secure, scalable, and resilient infrastructure solutions. Produce High and Low Level Designs (HLDs/LLDs) and technical documentation. Provide technical leadership throughout project delivery. Architect VMware Cloud Foundation (VCF) and NSX-T environments. Design enterprise networking, firewall, routing, and switching solutions. Provide expertise across Active Directory, ADFS, Windows, and Linux platforms. Ensure solutions meet security, compliance, and operational standards. Essential Skills Proven experience as a Technical or Infrastructure Architect. Strong VMware Cloud Foundation (VCF) and NSX-T experience. Enterprise networking, security, firewall, routing, and switching expertise. Active Directory and ADFS architecture experience. Windows and Linux infrastructure knowledge. Excellent stakeholder engagement and documentation skills. Desirable Hybrid cloud and Infrastructure as Code (IaC) experience. Knowledge of Zero Trust security principles. Security Requirements Candidates must hold active UKSV DV clearance (transferable).