PAM Architect

Service Description – PAM Architect

1. Mission

As PAM Architect, you play a key role in strengthening the privileged access security posture of

our client. You act as the functional and technical reference for the client's PAM platform

based on CyberArk and guide business and technical stakeholders through the intake, analysis

and onboarding process for applications, platforms and privileged access use cases.

You translate business, security and architectural needs into concrete PAM integration patterns,

ensuring that privileged access is controlled, traceable, compliant and scalable across the environment.

You work closely with application architects, security officers, IAM/PAM squads, infrastructure

teams and operational stakeholders to define the right CyberArk solution for each onboarding

request.

2. Scope & Focus Areas

• PAM intake: lead and structure intake discussions with application teams to understand privileged access needs, target systems, user groups, access flows and operational constraints.

• CyberArk solution shaping: define the appropriate CyberArk-based integration approach, including safes, accounts, platforms, connectors, session management, recording, password rotation and remote access patterns.

• PAM and VAM implementation support: contribute expertise to PAM and Vendor Access Management implementations, migrations and onboarding trajectories.

• Architecture alignment: ensure that proposed solutions are aligned with client's security principles, IAM architecture, governance standards and operational practices.

• Stakeholder enablement: explain PAM concepts and CyberArk capabilities to application teams, architects, security officers and business stakeholders in a clear and pragmatic way.

3. Key Responsibilities

• Manage the intake process for applications and platforms that need to be onboarded to

PAM or VAM.

• Analyse application architectures together with application architects/analysts and identify all required privileged access integrations.

• Assess whether standard CyberArk integration patterns can be used or whether custom

implementation patterns are required.

• Define and document requirements for CyberArk safes, accounts, access groups, approval flows, session recording, password rotation and break-glass scenarios.

• Translate security, compliance and audit requirements into practical PAM controls and onboarding decisions.

• Support the PAM squad during implementation by clarifying requirements, validating design choices and removing functional ambiguity.

• Contribute to standardisation of PAM onboarding patterns, reusable documentation, intake templates and decision criteria.

• Collaborate with Security, IAM, infrastructure, application and operations teams to ensure end-to-end alignment.

• Provide guidance during testing, UAT, rollout and handover to operations.

• Act as a trusted advisor for stakeholders on CyberArk capabilities, limitations and best

practices.

4. Required Experience & Knowledge

• Strong hands-on experience with Privileged Access Management concepts, operating

models and implementation methods.

• Deep functional and technical knowledge of CyberArk, preferably including EPV, PVWA, CPM, PSM, PSMP, CyberArk Remote Access and related integration patterns.

• Proven experience in PAM implementations in large or complex organisations.

• Experience with Vendor Access Management or Remote Privileged Access solutions is highly desirable.

• Good understanding of IAM, security architecture, privileged account lifecycle, least privilege, segregation of duties, auditability and compliance requirements.

• Ability to analyse application landscapes, infrastructure patterns and access flows, and translate them into secure PAM designs.

• Experience in documenting functional and technical requirements, architectural decisions, onboarding patterns and operational handover material.

• Familiarity with ServiceNow, access request processes, approval flows, IT operations and enterprise security governance is an asset.

• Knowledge of regulatory and security drivers such as NIS2, ISO 27001, audit controls

and risk management is a plus.

5. Required Competencies

• Customer centricity: understand stakeholder needs and translate them into pragmatic, secure and sustainable solutions.

• Analytical thinking: structure complex access scenarios and identify the right PAM integration approach.

• Clear communication: explain CyberArk and PAM concepts to both technical and non-technical audiences.

• Collaboration: work effectively with application teams, architects, security officers, product owners and operational teams.

• Result orientation: drive intakes to clear decisions and support delivery until implementation is completed.

• Security mindset: consistently balance usability, operational efficiency, compliance and risk reduction.

6. Qualifications

• Bachelor’s or Master’s degree in Computer Science, Information Technology, Cyber

Security or equivalent experience.

• Minimum 5 years of relevant experience in IAM, PAM, cyber security or enterprise

architecture roles.

• At least 3 years of practical experience with CyberArk in an enterprise context.

• CyberArk certifications are a strong plus.

• Fluent communication skills in English; knowledge of Dutch and/or French is an asset.

7. Who We Are Looking For

We are looking for a senior PAM professional who combines strong CyberArk expertise with the

ability to guide stakeholders through complex functional and architectural choices. You are

comfortable working in a large enterprise environment, you understand the importance of

standardisation and governance, and you can turn security requirements into practical

implementation decisions.