> Markdown version of [/jobs/ext/1247349-technology-architect-identity-management-privileged-user-management](https://www.wearedevelopers.com/jobs/ext/1247349-technology-architect-identity-management-privileged-user-management). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Technology Architect | Identity Management | Privileged User Management - **Company:** Ipolarity LLC - **Location:** Richardson, TX, United States (Remote available) - **Experience:** Expert - **Salary:** $92,700.0 - $167,500.0 - **Contract:** Temporary to permanent - **Skills:** Amazon Web Services, Application Integration Architecture, Microsoft Azure, Cloud Computing, DevOps, Identity and Access Management, Key Management, Lightweight Directory Access Protocols (LDAP), OAuth, OpenID, Windows PowerShell, Role-Based Access Control, ArcSight SIEM Tool, Migration Manager, Security Assertion Markup Language (SAML), Session Management, Security Information and Event Management, Single Sign-On, Systems Integration, Okta, Cyberark, Kubernetes, SailPoint, Restful APIs, Splunk, User Administration, Servicenow - **Published:** July 12, 2026 - **Apply:** https://www.careerjet.com/jobad/us7265603b88f4819a1aebcf712bb8d32f ## About the Role Minimum years of experience required: 12+ Years (8+ Years in PAM, 5+ Years in Delinea) ## Description Lead architecture and design for Delinea Secret Server, Connection Manager, and DevOps Secrets Vault. Define CyberArk-to-Delinea migration strategy, wave planning, cutover, and rollback approach. Design Safe-to-Folder mapping, RBAC model, password rotation, session recording, and access workflows. Drive integrations with AD/LDAP, RADIUS, SailPoint/Saviynt, ServiceNow, Splunk, ArcSight, Okta, and Entra ID. Provide technical leadership to offshore Delinea and automation teams. Conduct architecture reviews, risk assessments, and executive/client workshops. Coordinate with client PAM teams and Delinea Professional Services throughout the transformation lifecycle Nice to have skills: Delinea Secret Server (Cloud & On-Prem) Delinea DSV, Connection Manager, Discovery Engine CyberArk PAS, CPM, PSM, PSMP, AIM/AAM, Conjur PAM migrations and platform transformations SSO, SAML, OAuth, OIDC, LDAP, RADIUS, SCIM, Seeking an experienced Delinea Architect to lead a large-scale CyberArk-to-Delinea migration program for a global technology client. The architect will own solution design, migration strategy, integration architecture, stakeholder management, and technical governance across privileged account migration, session management, password rotation, DevOps secrets modernization, and enterprise integrations. Key Responsibilities Lead architecture and design for Delinea Secret Server, Connection Manager, and DevOps Secrets Vault. Define CyberArk-to-Delinea migration strategy, wave planning, cutover, and rollback approach. Design Safe-to-Folder mapping, RBAC model, password rotation, session recording, and access workflows. Drive integrations with AD/LDAP, RADIUS, SailPoint/Saviynt, ServiceNow, Splunk, ArcSight, Okta, and Entra ID. Provide technical leadership to offshore Delinea and automation teams. Conduct architecture reviews, risk assessments, and executive/client workshops. Coordinate with client PAM teams and Delinea Professional Services throughout the transformation lifecycle. Required Skills Delinea Secret Server (Cloud & On-Prem) Delinea DSV, Connection Manager, Discovery Engine CyberArk PAS, CPM, PSM, PSMP, AIM/AAM, Conjur PAM migrations and platform transformations SSO, SAML, OAuth, OIDC, LDAP, RADIUS, SCIM ServiceNow, SailPoint/Saviynt, SIEM integrations REST APIs, PowerShell, automation and scripting Azure, AWS, Kubernetes, DevOps Secrets Management Project Code: INFCITYPRK2, Job Description In the assigned Job Role of Domain Consultant 2, your Area Of Responsibility will be as below: Analyze client business processes to identify optimization oppo… + 1 month ago ## Related Videos - [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect) - [Our journey with Spring Boot in a microservice architecture](https://www.wearedevelopers.com/videos/511-our-journey-with-spring-boot-in-a-microservice-architecture) - [Delegating the chores of authenticating users to Keycloak](https://www.wearedevelopers.com/videos/1558-delegating-the-chores-of-authenticating-users-to-keycloak) - [Delay the AI Overlords: How OAuth and OpenFGA Can Keep Your AI Agents from Going Rogue](https://www.wearedevelopers.com/videos/1637-delay-the-ai-overlords-how-oauth-and-openfga-can-keep-your-ai-agents-from-going-rogue) - [Un-complicate authorization maintenance](https://www.wearedevelopers.com/videos/889-un-complicate-authorization-maintenance) - [Advanced Cypress: custom assertions and tasks](https://www.wearedevelopers.com/videos/790-advanced-cypress-custom-assertions-and-tasks) ## Related Articles - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Dev Digest 164: AI Agents, AI Blindspots and MCP security problems](https://www.wearedevelopers.com/magazine/578-dev-digest-164-ai-agents-ai-blindspots-and-mcp-security-problems) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Everything a Developer Needs to Know About MCP with Neo4j](https://www.wearedevelopers.com/magazine/604-everything-a-developer-needs-to-know-about-mcp-with-neo4j) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)