​Job Title- CyberArk Architect

Experience- 10–15+ Years of IT Security experience with 7+ years in CyberArk PAM architecture, implementation, migration, and upgrade projects.

Job Summary

We are seeking an experienced CyberArk Architect to design, implement, upgrade, migrate, and optimize CyberArk Privileged Access Management (PAM) solutions across enterprise environments. The ideal candidate will possess deep expertise in CyberArk architecture, deployment, integrations, security best practices, and operational governance while leading large-scale implementation and transformation initiatives.

Key Responsibilities

Architecture & Design

• Design and architect enterprise-wide CyberArk PAM solutions.

• Define high-level and low-level designs (HLD/LLD) for CyberArk deployments.

• Develop scalable and secure PAM architecture aligned with organizational security standards.

• Design disaster recovery (DR), high availability (HA), and business continuity solutions.

Implementation

• Lead end-to-end CyberArk implementation projects.

• Install and configure:

• CyberArk Vault

• PVWA (Password Vault Web Access)

• CPM (Central Policy Manager)

• PSM (Privileged Session Manager)

• PSMP

• PTA (Privileged Threat Analytics)

• AIM/Credential Providers

• Configure Safes, Platforms, Policies, and User Access Controls.

• Integrate CyberArk with Active Directory, LDAP, Azure AD, and MFA solutions.

Upgrade & Migration

• Plan and execute CyberArk version upgrades with minimal business impact.

• Perform CyberArk platform migrations across environments.

• Conduct server migrations, Vault migrations, and component upgrades.

• Develop migration strategies, rollback plans, and post-upgrade validation procedures.

• Perform compatibility assessments and impact analysis.

Integration & Automation

• Integrate CyberArk with:

• SIEM solutions (Splunk, QRadar, Sentinel)

• ServiceNow

• SailPoint

• Azure AD

• Okta

• AWS/Azure/GCP platforms

• Automate CyberArk onboarding and management using:

• REST APIs

• PowerShell

• Python

Security & Governance

• Establish PAM governance frameworks.

• Define privileged account lifecycle management processes.

• Conduct security reviews and risk assessments.

Operational Support

• Provide L3/L4 support for CyberArk infrastructure.

• Troubleshoot complex PAM issues and perform root cause analysis.

• Develop operational runbooks and technical documentation.

• Mentor engineers and administrators.

​

Required Skills

CyberArk Expertise

• CyberArk PAM Suite

• Vault Administration

• PVWA

• CPM

• PSM / PSMP

• PTA

• EPM (Endpoint Privilege Manager)

• AIM/Credential Providers

​

Required Experience

• 10+ years of Information Security experience.

• 7+ years of hands-on CyberArk implementation experience.

• Experience in at least:

• 3+ CyberArk implementations

• 3+ CyberArk upgrades

• 2+ CyberArk migration projects

• Experience with PAM assessments and solution architecture.

• Experience integrating CyberArk with enterprise applications and cloud environments.

​

Certifications (Preferred)

• CyberArk Defender PAM

• CyberArk Sentry PAM

• CyberArk Guardian

• CyberArk Certified Delivery Engineer (CDE)