Principal Architect SME - CyberArk

About the Organization JSL delivers customer-centric IT solutions for Federal, State and local governments. We offer our customers three distinct advantages: expertise in our service offerings, leadership that drives innovation, and a culture focused on customer satisfaction. Our mission is to cultivate relationships, responsibility and results through people, purpose and process.

The Cyber Ark Principal Architect / Privileged Access Management (PAM) SME will serve as the senior technical authority for the architecture, implementation, integration, security, and operation of an enterprise Cyber Ark PAM environment supporting a large federal customer. The individual will provide architectural leadership for a highly available, multi-tenant Cyber Ark environment hosted within AWS Gov Cloud / FedRAMP High, supporting privileged access across on-premises and cloud infrastructure.

The Principal Architect will work with cybersecurity, ICAM, cloud, infrastructure, application, and operations teams to ensure the PAM solution meets federal security requirements, availability objectives, disaster recovery requirements, and operational SLAs.

• Serve as the principal technical authority for Cyber Ark TCPAM/PRIVMGMT and Cyber Ark PAS architecture, engineering, operations, and solution enhancements.
• Architect and oversee Cyber Ark vault, CPM, PSM, PVWA, privileged account lifecycle, safes, reconciliation, recertification, break-glass, backup/restore, DR, certificate renewal, and platform scaling.
• Design and maintain multi-tenant bureau segregation and privileged access across Windows,
  * nix, mainframes, network devices, databases, and cloud environments.
• Ensure PIV IAL3/AAL3 primary authentication, SSO integration, privileged-session recording/playback, audit logging, and password/passphrase controls.
• Lead HA/DR architecture across AWS Availability Zones and support RTO/RPO objectives and Cyber Ark maximum tolerable downtime requirements.
• Integrate Cyber Ark with SailPoint/TCCM/Identity Security Cloud for PRIV/MUR data and with Splunk, Cloud Trail, ITSM, and monitoring/security services.
• Provide technical leadership for Cyber Ark Secure Web Sessions, EPM policy, Conjur secrets management, and Ansible automation where activated.
• Lead Tier 3 troubleshooting, architecture reviews, RCA, security patching, vulnerability remediation, technical documentation, runbooks, and knowledge transfer.
• Design and maintain secure privileged account management across Windows, Linux/Unix, databases, network devices, mainframes, applications, cloud platforms, service accounts, and non-person entities (NPEs).
• Establish PAM architecture standards, patterns, technical baselines, engineering procedures, and security configuration standards.
• Troubleshoot complex Cyber Ark issues and lead technical root-cause analysis (RCA) for high-priority incidents.
• Develop and validate Cyber Ark monitoring, alerting, logging, and audit capabilities and integration with enterprise monitoring/SIEM platforms.
• Support cybersecurity and authorization activities including NIST 800-53/RMF, FISMA, FedRAMP High, POA&M remediation, vulnerability remediation, audit requests, and penetration testing.
• Provide technical leadership and mentoring to Cyber Ark engineers and administrators and support structured knowledge transfer to Federal personnel.
• Evaluate proposed Cyber Ark changes and enhancements for security, architectural fit, performance, availability, and operational impact.

• B…