Job Title
PAM Architect (CyberArk)

Job Type
Contract — 12 months

Salary
€250 per day

Job Location
Sofia, Bulgaria — Hybrid, 2 days per week onsite

Job Reference
TM-PAMSOF-0826

The Company
Signify Technology are working with a leading global professional services and consultancy firm with a well-established presence across Europe. They support a large international client base and run a mature security and identity function spanning cloud, hybrid, and on-premises environments. This role sits within their security team, who are expanding their privileged access capability and offer genuine ownership over how the programme is built and run, alongside experienced identity, platform, and infrastructure teams.

The Role
PAM Architect (CyberArk)
You'll own the design and delivery of a Privileged Access Management programme built on CyberArk, securing privileged access for both people and machine identities across cloud, hybrid, and on-prem systems.

You will:
Own the PAM architecture end to end, covering vaulting, session management, credential rotation, and onboarding/offboarding workflows
Build automation for privileged account and safe lifecycle management using PowerShell, Python, and Bash
Integrate CyberArk with identity providers, SSO/MFA, and directory services, designing approval workflows for privileged sessions
Extend PAM controls into Azure alongside the cloud engineering team
Define PAM standards, hardening baselines, and runbooks, and support audits and access reviews

Skills/Experience Required
8+ years in identity security, PAM engineering, IAM, or security architecture
Proven experience designing and implementing CyberArk PAM solutions in enterprise environments
Hands-on experience securing privileged access across Windows, Linux/Unix, and cloud platforms
Experience integrating PAM with AWS, Azure, or GCP, and CI/CD environments
Fluent English, comfortable advising senior stakeholders on privileged access risk

Desirable Skills
CyberArk certification (Defender, Sentry, or Guardian)
CISSP, CISM, or CCSP
TOGAF or equivalent architecture certification

Client Benefits
12-month contract with a well-established global organisation
Hybrid working — 2 days onsite in Sofia City

Sign off
If this sounds like a good fit, reply with your updated CV, availability, and rate expectations and we'll be in touch. Tana Mushambadope — tana.mushambadope@signify-tech.com

Diversity & Inclusion & Accessibility Statement
Read and apply for this role in the way that works for you using our Recite Me assistive technology tool. We make an active choice to be inclusive towards everyone every day — please let us know if you require any accessibility adjustments through the application or interview process. Signify's mission is to empower every person, regardless of background or circumstance, with an equitable chance to achieve the careers they deserve.