11/06/2026 updated

**** ******** ****
partially available
info: Available evenings and weekends

Senior CyberArk / PAM Solution Architect

Ams, Netherlands
Only remote
BSc Business, IT & Management
Ams, Netherlands
Only remote
BSc Business, IT & Management

Profile attachments

CV_David_Reusink_PAM_Solution_Architect.pdf

OAuth 2.0OIDCZero TrustDesign ManagementPublic Key CertificatesIdentity ManagementIdentity Management SystemsWindows PowerShellAzure Active DirectoryAWS CLIRSA (Cryptosystem)
PAM / CyberArk
Expertise in CyberArk Self-Hosted and Privilege Cloud, Conjur / Secrets Manager, AAM, PTA, and custom CPM plug-in development. Secrets management for applications, pipelines and service accounts, credential rotation, privileged account discovery and onboarding, as well as privileged session monitoring and recording.

PAM Architecture
Enterprise PAM platform design, design authority, HLD / LLD, target architecture and platform standards. Access-model and authorisation design, RBAC / ABAC, least privilege, connector architecture, and Self-Hosted to Privilege Cloud migration architecture.

IAM / Identity
Proficiency in Active Directory, Entra ID, SailPoint IdentityIQ, SCIM, Kerberos, LDAP(S), SAML, OAuth 2.0, OIDC, MFA, and joiner-mover-leaver automation.

Security Architecture
Zero-trust and least-privilege design, threat modelling, risk and control design, security accreditation, forest and domain isolation, PKI - CA hierarchy and trust chain design, certificate-based authentication, and key custody.

Resilience & Infrastructure
High-availability and disaster-recovery design, dual-site architecture, tested failover and recovery, emergency access, VLAN and zone design, firewall flow and port design, load balancing, and TLS.

Automation & Cloud
PowerShell, Python, Bash, REST APIs, infrastructure as code (Terraform / Ansible, working knowledge), Windows Server, Linux, VMware, Azure, AWS, and GCP.

Governance & Delivery
NIS2, DORA, ISO 27001, ISO 22301, NIST, TOGAF, audit evidencing, architecture-board and CISO-level engagement, workshop facilitation, technical leadership and mentoring, Agile & Scrum, ITIL v3.

CyberArk Certifications
Certified Delivery Engineer (CDE-PAM), Certified Privilege Cloud Delivery Engineer (CDE-CPC), Certified Defender + Sentry (Self-Hosted), and Conjur Administration.

Cloud & Security Certifications
Microsoft Azure Security Engineer Associate (AZ-500) and Cisco Certified Network Associate (CCNA).

Experience

Professional experience5 - 10 years
Freelancer since2024

Languages

EnglishFluentDutchNative speaker

Project history

CyberArk / PAM Solution Architect

DXC Technology
Design authority for several enterprise privileged access programmes running in parallel. Owns the architecture end-to-end, from security requirements through high- and low-level design to build specification. Designs resilient dual-site PAM platforms with tested failover and recovery procedures and emergency access. Takes designs through formal security accreditation in classified and highly regulated environments. Extends control to machine identities via centralised secrets management for applications, pipelines, and automation. Defines the privileged access model covering identity access, account discovery, onboarding, and session recording.

CyberArk Capability Lead

Accenture
Led the enterprise-wide migration from CyberArk Self-Hosted to Privilege Cloud, including target architecture, platform standards, connector design, onboarding controls, and rollout strategy across all business units. Drove SCIM-based integration with SailPoint IdentityIQ, automating privileged entitlement assignment and joiner-mover-leaver synchronisation. Defined and governed PAM standards, access policies and MFA controls in line with telecom regulatory requirements (RVIT). Led a cross-functional Agile capability team of engineers and consultants providing technical direction and design reviews.

CyberArk Solution Architect

Accenture
Onboarded 170 critical applications and reduced direct (non-PAM) privileged access by 99%, establishing a new enterprise access baseline. Redesigned enterprise PAM controls and operating processes to align with NIS2 and DORA. Executed RBAC clean-up and policy rationalisation, remediating account structures, entitlement sprawl and inconsistent platform settings. Led the PAM capability and onboarding teams, turning ad hoc intake into a repeatable qualification and onboarding pattern.

IAM Solution Architect

Accenture
Designed the target hybrid multi-cloud IAM and PAM architecture for a complex government environment spanning multiple identity stores, extensive federation and inconsistent governance across departments. Defined TOGAF-based Architecture Building Blocks with explicit functional requirements. Advised on consolidating onto Entra ID as the primary identity platform and presented the architecture to the Enterprise Architecture Board.

PAM Consulting Engineer

Accenture
Delivered a CyberArk PAM rollout across more than 10 business units, covering planning, deployment, upgrades and ongoing support. Developed custom CPM plug-ins to bring complex and non-standard applications under managed credential rotation. Led proofs of concept for Conjur and PTA, extending PAM into DevSecOps and CI/CD pipelines, and testing behavioural threat detection for privileged sessions.

PAM Consultant & Project Manager

Accenture
Set up and ran the PAM onboarding factory, industrialising application and account integration with secure credential storage and session monitoring. Designed and built the SailPoint IdentityIQ-CyberArk interface to enable automated provisioning and access-governance reporting, and coached IT administrators and application owners on the new PAM workflows.

ISMS Consultant

Accenture (Finance)
Developed ISO 27001-aligned ISMS standards to achieve certification readiness; defined access-control and information-management policies and translated security requirements into enforceable controls.

SAP GRC Consulting Analyst

Accenture (Beverage)
Integrated multiple business units into a centralised SAP GRC environment; resolved segregation-of-duties and critical-access conflicts and built the compliance reporting used in audits.

IAM & PAM Consultant

IDProfs (Finance)
CyberArk PAM implementation covering RBAC model, safe design, and onboarding of hundreds of privileged accounts; ran least-privilege and PAM adoption workshops with IT administrators.

Business Intelligence Consultant

NCCW (Real Estate)
ERP process mapping and KPI reporting for housing-corporation clients.

Certificates

CDE-CPC

CyberArk

2024

CDE-PAM

CyberArk

2024

Contact form

Log in to get in touch

You need to be logged in to use the contact form.

Sign upLog in