Role: CyberArk Architect

Location: Remote – US
Duration: 12 Months

Job Description:

We are seeking a Senior CyberArk Architect / PAM Engineer with 5–8+ years of hands-on CyberArk experience to assess, design, implement, and optimize enterprise CyberArk PAM and Cloud/SaaS environments. The candidate will evaluate the current PAM landscape, identify security and operational gaps, define the target architecture, and develop a prioritized implementation roadmap.

Key Responsibilities:

• Assess existing CyberArk architecture, configuration, policies, integrations, account onboarding, password rotation, session management, and platform health.
• Develop current-state assessments, gap analysis, target-state architecture, PAM maturity plans, and implementation roadmaps.
• Implement and optimize CyberArk PAM, Cloud/SaaS, CPM, PSM/PSMP, SIA, JIT privileged access, and secrets management.
• Manage onboarding of privileged accounts, applications, databases, service accounts, APIs, cloud platforms, Windows/Linux systems, and network devices.
• Configure password rotation, verification, reconciliation, privileged session access, monitoring, and recording.
• Design and implement CyberArk Secure Infrastructure Access (SIA) and Just-in-Time (JIT) access to reduce standing privileges and credential exposure.
• Lead CyberArk Endpoint Privilege Manager (EPM) architecture, policy development, application control, privilege elevation, agent deployment, phased rollout, troubleshooting, exception management, and optimization.
• Integrate CyberArk with IAM/identity providers, AWS/Azure/Google Cloud Platform, ITSM, SIEM, applications, DevOps/CI/CD, and monitoring platforms.
• Develop automation using PowerShell, Python, REST APIs, and CyberArk capabilities.
• Establish PAM standards, SOPs, runbooks, governance, account lifecycle processes, and operational procedures.
• Collaborate with IAM, security, infrastructure, cloud, application, and business teams and provide knowledge transfer.

Required Skills:

CyberArk PAM, CyberArk Cloud/SaaS, CPM, PSM, PSMP, SIA, EPM, JIT Privileged Access, Privileged Account Management, Password Rotation/Reconciliation, Session Management, Secrets Management, Application & Service Account Onboarding, Windows/Linux, REST APIs, PowerShell, Python, IAM Integration, Cloud Integration, PAM Architecture & Assessment.

Preferred:

PTA, AWS/Azure/Google Cloud Platform, Kubernetes, DevOps/CI/CD, ITSM/SIEM integrations, CyberArk Defender/Sentry certifications, CISSP.

Key Deliverables:

Current-state assessment, PAM gap/maturity analysis, target-state architecture, CyberArk Cloud strategy, SIA/JIT strategy, EPM deployment and policy strategy, onboarding framework, integration plan, remediation roadmap, PAM standards/runbooks, and knowledge-transfer documentation.