> Markdown version of [/jobs/ext/2956511-solutions-architect-privileged-access-management](https://www.wearedevelopers.com/jobs/ext/2956511-solutions-architect-privileged-access-management). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Solutions Architect (Privileged Access Management) - **Company:** Guidehouse Inc. - **Location:** Washington, DC, United States - **Experience:** Expert - **Salary:** $149,000.0 - $248,000.0 - **Contract:** Permanent contract - **Skills:** User Authentication, Cyber Security, Identity and Access Management, Password Management, Migration Manager, Zero Trust Network Access, Session Manager SubSystems, Cyberark - **Published:** September 17, 2026 - **Apply:** https://guidehouse.wd1.myworkdayjobs.com/External/job/US---DC-Washington/Solutions-Architect--Privileged-Access-Management-_44428 ## About the Role * Minimum of EIGHT (8)+ years of overall work experience. * Experience in Privileged Access Management architecture, solution design, or related cybersecurity roles. * Hands-on CyberArk experience preferred. * Experience designing enterprise privileged access security architecture, vaulting logic, session monitoring, and credential lifecycle workflows. * Strong knowledge of CyberArk components, including Vault, CPM, PSM, and credential rotation processes. * Experience with privileged account onboarding, migration planning, and service account management. * Ability to define and implement privileged access policies, session controls, and isolation strategies. * Experience integrating PAM solutions with identity lifecycle automation, authentication, and enterprise security platforms. * Strong communication and collaboration skills with the ability to work across technical and non-technical stakeholders. * Ability to operate in a consulting or client-facing environment and provide clear technical guidance and documentation. * An ACTIVE and MAINTAINED "TOP SECRET" Federal or DoD security clearance. * US Citizenship is contractually required. * Must be able to work on-site in Washington, DC, 5 days/week. What Would Be Nice To Have: * CyberArk certification or other PAM/security platform certifications. * Experience in large enterprise or highly regulated environments. * Knowledge of identity governance, access management, and zero trust security concepts. * Experience supporting process improvement initiatives and operational maturity efforts. * Background in security architecture, infrastructure engineering, or cloud/security integration. * Experience working in a professional services or advisory environment. ## Description * Design and architect enterprise Privileged Access Management (PAM) solutions with a focus on CyberArk to secure privileged accounts, service accounts, and administrative access across the enterprise. * Architect CyberArk Vault, Central Policy Manager (CPM), Privileged Session Manager (PSM), and credential rotation engines to support secure vaulting, session monitoring, and automated password management. * Define privileged access policies, isolation strategies, session control requirements, and technical standards aligned to enterprise security objectives and compliance requirements. * Develop onboarding and migration models for privileged accounts and service accounts, including discovery, assessment, remediation, and implementation planning. * Integrate PAM workflows with identity lifecycle processes, authentication systems, and enterprise security tooling to enable automated and secure access management. * Partner with cybersecurity, infrastructure, identity, and application teams to translate business and security requirements into scalable PAM architecture and implementation plans. * Provide technical leadership, solution design documentation, and advisory support throughout the project lifecycle, from strategy and architecture through deployment and optimization. * Support operational readiness, troubleshooting, and continuous improvement of PAM controls, workflows, and platform performance. ## Related Videos - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [A Developer's Framework for Any Tool Migration](https://www.wearedevelopers.com/videos/2035-a-developer-s-framework-for-any-tool-migration) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Tomorrow's cloud data platforms - fully managed database-as-a-service (DBaaS)](https://www.wearedevelopers.com/videos/254-tomorrow-s-cloud-data-platforms-fully-managed-database-as-a-service-dbaas) - [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large) - [Best Practices for Using GitHub Secrets](https://www.wearedevelopers.com/videos/1214-best-practices-for-using-github-secrets) ## Related Articles - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [The top 200 passwords of 2024 can be cracked in less than a second](https://www.wearedevelopers.com/magazine/502-the-top-200-passwords-of-2024-can-be-cracked-in-less-than-a-second) - [Best Companies to work for in London: Top 25 Companies in 2023](https://www.wearedevelopers.com/magazine/187-best-companies-to-work-for-in-london-top-25-companies-in-2023) - [Best Companies to Work For in Berlin: Top 14 Companies in 2023 ](https://www.wearedevelopers.com/magazine/188-best-companies-to-work-for-in-berlin-top-14-companies-in-2023)