CyberArk PAM Architect

Years of Experience

• 10+ years of relevant experience in designing, architecting, and implementing PAM and EPM solutions across complex enterprise environments.

• Serve as the subject matter expert for Privileged Access Management (PAM), providing architecture guidance and best practices across Cyber Ark platforms.
• Partner with business, security, infrastructure, and application teams to assess privileged access risks, define PAM roadmaps, and deliver secure, scalable solutions aligned with organizational objectives.
• Evaluate existing PAM and identity security environments, recommend modernization and optimization strategies, and drive adoption of industry-leading privileged access controls.
• Lead client-facing discussions, workshops, and design reviews with US-based stakeholders, translating business and compliance requirements into effective PAM solutions.
• Provide governance, operational oversight, and lifecycle management for PAM platforms, including continuous improvement, upgrade planning, troubleshooting, documentation, and adherence to security and regulatory standards.

• Creating and implementing strategies for managing privileged access using Cyber Ark, designing PAM solutions, and ensuring the secure storage, management, and retrieval of sensitive credentials in enterprise environments.
• Developing and enforcing security policies, access controls, and privileged access management procedures using Cyber Ark capabilities to mitigate security risks and support compliance requirements.
• Design secure and scalable Cyber Ark PAM solutions, creating High-Level Designs (HLDs) and Low-Level Designs (LLDs) for cloud, on-premises, and hybrid environments while working closely with US-based stakeholders.
• Implement, oversee, and document high-level and low-level designs for Cyber Ark deployments, defining PAM strategies aligned with business, security, and regulatory requirements.
• Collaborate with automation SPOCs, application teams, and onsite stakeholders to build, test, and optimize PAM-related automation solutions.
• Design, deploy, and support high-performance, highly available Cyber Ark PAM environments with large-scale target endpoints, creating workflows, custom connectors, policies, and integrations.
• Should be capable of deploying, installing, and configuring Cyber Ark components (Vault, CPM, PVWA, PSM, PSMP, AIM/CCP) as per client requirements.
• Develop custom plugins, integrations, and connectors for Cyber Ark CPM/PSM Password Safe/PRA components, as required.
• Hands‑on experience or knowledge in configuring Cyber Ark PTA, Endpoint Privilege Management (EPM) and privileged access monitoring capabilities.
• Integrating various platforms with Cyber Ark, including Windows, UNIX/Linux, databases, network devices, SSH keys, cloud platforms, SAP, and enterprise applications.
• Creating and managing Safes, platforms, owners, vault policies, asset groups, account management policies, and access controls within Cyber Ark environments.
• Should be familiar with Cyber Ark Password Upload Utility, PACLI, REST APIs, and corresponding administration, onboarding, and integration utilities/tools.
• Experience in integrating Cyber Ark solutions with LDAP/Active Directory, SIEM, SNMP, MFA, and other identity and access management systems.
• Strong scripting skills using Power Shell, Python, Shell scripting, or APIs to automate tasks, develop integrations, and customize Cyber Ark solutions.
• Knowledge of regulatory requirements and industry standards related to privileged access management, including NIST, CIS, SOX, PCI‑DSS, HIPAA, and GDPR.
• Experience with security monitoring tools and integrating Cyber Ark with Security Information and Event Management (SIEM) platforms; ability to support…