> Markdown version of [/jobs/ext/2177769-cyberark-pam-architect](https://www.wearedevelopers.com/jobs/ext/2177769-cyberark-pam-architect). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # CyberArk (PAM) Architect - **Company:** IBM - **Location:** Los Angeles, CA, United States - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Microsoft Access, Active Directory, Amazon Web Services, Data Analysis, Microsoft Azure, Unix, Software as a Service, Cloud Computing, Cyber Security, Linux, DevOps, Disaster Recovery, Multi-Factor Authentication, Identity and Access Management, Python (Programming Language), Key Management, Lightweight Directory Access Protocols (LDAP), PostgreSQL, Microsoft SQL Server, Windows Servers, OpenShift, Oracle (Applications), Password Management, PCI Data Security Standards, Performance Tuning, Windows PowerShell, Role-Based Access Control, Azure Active Directory, ArcSight SIEM Tool, Cloud Services, Zero Trust Network Access, Session Management, Session Manager SubSystems, Security Information and Event Management, Scripting, Google Cloud, Cyberark, System Availability, QRadar, Kubernetes, CIS Benchmarks, Restful APIs, Splunk, Devsecops, Docker, Jenkins, Servicenow - **Published:** August 22, 2026 - **Apply:** https://dejobs.org/x/x/5C98AE557A7C42709ED257C31DE3414D/job/ ## About the Role * 10+ years of Information Security experience and 5+ years specializing in CyberArk Privileged Access Management solutions * Experience with operating Systems such as: Windows Server, Linux, Unix * Cloud Platforms: Azure, AWS, Google Cloud Platform * Directory Services: Active Directory, LDAP, Entra ID (Azure AD) * SIEM Integration: Splunk, QRadar, ArcSight, Sentinel * Ticketing & ITSM: ServiceNow, Remedy * Automation/Scripting: PowerShell, Python, REST APIs * DevOps Tools: Jenkins, Kubernetes, Docker, OpenShift * Databases: SQL Server, Oracle, PostgreSQL ## Description The CyberArk Privileged Access Management (PAM) Architect serves as a core contributor to the CyberArk PAM team, leveraging extensive expertise in the design, implementation, upgrade, and administration of enterprise-grade CyberArk security solutions across complex hybrid environments. This role is responsible for securing privileged identities, mitigating insider threats, and ensuring compliance with industry standards and regulatory requirements. The ideal candidate demonstrates a proven track record of delivering robust privileged access management solutions, optimizing security controls, and supporting the organization's cybersecurity and governance objectives. What you'll do: * CyberArk PAM Suite Architecture and Design * Privileged Access Security & Identity Governance * CyberArk PAS Components: * Digital Vault * Privileged Vault Web Access (PVWA) * Central Policy Manager (CPM) * Privileged Session Manager (PSM) * Privileged Threat Analytics (PTA) * Enterprise Secret Manager (Conjur) * Credential Providers (CP) * CyberArk SaaS and Self-Hosted Deployments * Discovery and Onboarding of Privileged Accounts * Session Monitoring, Recording, and Auditing * Password Management and Rotation * Secrets Management & DevSecOps Integration * Zero Trust and Least Privilege Implementation * Access Certification and Compliance Management * High Availability, Disaster Recovery, and Migration Strategies * Secrets Manager (Conjur) Key Responsibilities * Design and implement CyberArk PAM architectures aligned with business and security requirements. * Lead CyberArk deployments, upgrades, migrations, and platform hardening activities. * Configure safes, platforms, account onboarding, password rotation, and session management policies. * Integrate CyberArk with Active Directory, SIEM, MFA, ServiceNow, and cloud services. * Develop security standards, operational procedures, and PAM governance models. * Conduct risk assessments and recommend privileged access controls based on Zero Trust principles. * Provide L3 support, troubleshooting, performance tuning, and capacity planning. * Collaborate with security, infrastructure, cloud, and application teams to secure privileged accounts and secrets. Compliance & Security Frameworks * NIST Cybersecurity Framework * CIS Controls * ISO 27001 * SOX * PCI-DSS * HIPAA * GDPR * Zero Trust Security Architecture This position can be performed from anywhere in the USA Required technical and professional expertise ## Related Videos - [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker) - [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data) - [Docker Compose: Rediscovered](https://www.wearedevelopers.com/videos/1978-docker-compose-rediscovered) - [WeAreDevelopers LIVE - Node and Package Security](https://www.wearedevelopers.com/videos/2138-wearedevelopers-live-node-and-package-security) - [Docker exec without Docker](https://www.wearedevelopers.com/videos/1094-docker-exec-without-docker) - [Docker build without Docker](https://www.wearedevelopers.com/videos/100114-docker-build-without-docker) ## Related Articles - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Everything a Developer Needs to Know About MCP with Neo4j](https://www.wearedevelopers.com/magazine/604-everything-a-developer-needs-to-know-about-mcp-with-neo4j) - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [The Best X (Twitter) Accounts for Developers](https://www.wearedevelopers.com/magazine/294-the-best-x-twitter-accounts-for-developers)