CyberArk PAM Architect - W2

• Serve as the subject matter expert for Privileged Access Management (PAM), providing architecture guidance and best practices across CyberArk platforms.
• Partner with business, security, infrastructure, and application teams to assess privileged access risks, define PAM roadmaps, and deliver secure, scalable solutions aligned with organizational objectives.
• Evaluate existing PAM and identity security environments, recommend modernization and optimization strategies, and drive adoption of industry-leading privileged access controls.
• Lead client-facing discussions, workshops, and design reviews with US-based stakeholders, translating business and compliance requirements into effective PAM solutions.
• Provide governance, operational oversight, and lifecycle management for PAM platforms, including continuous improvement, upgrade planning, troubleshooting, documentation, and adherence to security and regulatory standards.

Technical Requirements

• Creating and implementing strategies for managing privileged access using CyberArk, designing PAM solutions, and ensuring the secure storage, management, and retrieval of sensitive credentials in enterprise environments.
• Developing and enforcing security policies, access controls, and privileged access management procedures using CyberArk capabilities to mitigate security risks and support compliance requirements.
• Design secure and scalable CyberArk PAM solutions, creating High-Level Designs (HLDs) and Low-Level Designs (LLDs) for cloud, on-premises, and hybrid environments while working closely with US-based stakeholders.
• Implement, oversee, and document high-level and low-level designs for CyberArk deployments, defining PAM strategies aligned with business, security, and regulatory requirements.
• Collaborate with automation SPOCs, application teams, and onsite stakeholders to build, test, and optimize PAM-related automation solutions.
• Design, deploy, and support high-performance, highly available CyberArk PAM environments with large-scale target endpoints, creating workflows, custom connectors, policies, and integrations.
• Should be capable of deploying, installing, and configuring CyberArk components (Vault, CPM, PVWA, PSM, PSMP, AIM/CCP) as per client requirements.
• Develop custom plugins, integrations, and connectors for CyberArk CPM/PSM Password Safe/PRA components, as required.
• Hands-on experience or knowledge in configuring CyberArk PTA, Endpoint Privilege Management (EPM) and privileged access monitoring capabilities.
• Integrating various platforms with CyberArk, including Windows, UNIX/Linux, databases, network devices, SSH keys, cloud platforms, SAP, and enterprise applications.
• Creating and managing Safes, platforms, owners, vault policies, asset groups, account management policies, and access controls within CyberArk environments.
• Should be familiar with CyberArk Password Upload Utility, PACLI, REST APIs, and corresponding administration, onboarding, and integration utilities/tools.

• 10+ years of relevant experience in designing, architecting, and implementing PAM and EPM solutions across complex enterprise environments., * Experience in integrating CyberArk solutions with LDAP/Active Directory, SIEM, SNMP, MFA, and other identity and access management systems.
• Strong scripting skills using PowerShell, Python, Shell scripting, or APIs to automate tasks, develop integrations, and customize CyberArk solutions.
• Knowledge of regulatory requirements and industry standards related to privileged access management, including NIST, CIS, SOX, PCI-DSS, HIPAA, and GDPR.
• Experience with security monitoring tools and integrating CyberArk with Security Information and Event Management (SIEM) platforms; ability to support client workshops, design discussions, and solution reviews in an onsite US-facing environment.

Soft Skills

• Excellent Verbal and written communication skills in English.
• Ability to present solutions to clients in person and remotely if needed.
• Good documentation skills that will enable creation of design documents for the technical solutions proposed.
• Excellent problem-solving skills.
• Good collaboration skills in working with virtual and distributed teams.

Certifications

• Good to have relevant PAM certifications such as:
• CyberArk Certified Delivery Engineer (CDE)
• CyberArk Certified Defender (CCD)
• CyberArk Certified Sentry (CCS)
• CyberArk Certified Guardian (CCG)
• CISSP (Certified Information Systems Security Professional)

Educational Qualifications

• University degree in IT or/and IT Security