CyberArk Architect | Remote

Cyber Ark Architect

Location:

Remote

Duration: 12+ months

Interview Mode:
Video

Only W2

World Wide Technology (WWT) is seeking a highly experienced Cyber Ark Architect to lead the design, enablement, adoption, and transformation of Cyber Ark Privileged Access Management (PAM) solutions across a large, complex enterprise environment. The architect will work directly with application, security, and engineering teams to drive enterprise adoption of secrets management, privileged access, and session management, supporting both data center and cloud (AWS) environments.

The ideal candidate operates at the intersection of application architecture, security engineering, identity, and cloud, with a strong focus on modernizing Cyber Ark implementations (SIA, Zero Standing Privileges, cloud‑ready PAM).

• Partner with application and engineering teams to drive Cyber Ark PAM adoption and integration.
• Provide hands‑on guidance for application credential management and password rotation, secrets discovery, ownership mapping, and usage analysis, and integration of Cyber Ark into enterprise application workflows.
• Support application teams with script and API‑based integrations to consume Cyber Ark services, identification and remediation of hardcoded/static credentials, and application design changes for secure secrets retrieval.
• Act as a trusted advisor to developers, architects, and platform teams.

• Lead end‑to‑end Cyber Ark architecture, rollout, and operationalization.
• Design scalable solutions that are cloud‑ready, cloud‑agnostic, and aligned for hybrid (on‑prem + cloud) environments.
• Provide architectural guidance for enterprise PAM expansion and integration alongside or in place of cloud‑native secrets tools.
• Align Cyber Ark solutions with enterprise security standards and resilience requirements.

• Lead design and implementation of Cyber Ark PSM capabilities.
• Architect solutions supporting data center workloads, hybrid, and AWS‑based environments.
• Support transition strategies for PSM/PSMP to modern architectures (SIA).

• Lead migration from legacy Cyber Ark models to SIA architecture.
• Design and implement SIA connectors (Windows‑based for Windows/Linux targets) and API‑driven connector deployment at scale.
• Develop attribute‑based access control (ABAC) policies to support Zero Standing Privileges (ZSP) and fine‑grained, time‑bound privileged access.
• Integrate Cyber Ark with enterprise identity providers (MFA/IdP).

• Oversee deployment of Credential Provider agents across large‑scale environments.
• Lead application onboarding to Cyber Ark vault, transitioning from static credentials to dynamic secrets retrieval and ensuring proper mapping of accounts, safes, and policies during platform changes.

• Design and implement ZSP models for developer personas.
• Define CLI and web‑based access patterns and secure workload‑to‑resource access in multi‑cloud environments.
• Differentiate developer access from administrative privileged access.

• Build and validate test environments prior to production rollout.
• Conduct connectivity validation (Windows, Linux, databases) and regression testing for existing PSM workflows.
• Ensure performance, scalability, and security effectiveness.

• Lead adoption efforts for new Cyber Ark operating models.
• Support transition from traditional PVWA usage to modern ephemeral access models.
• Educate stakeholders on user experience and process changes.

• Partner with security, infrastructure, and application teams across the enterprise.
• Provide technical leadership and strategic direction.
• Contribute to enterprise PAM roadmap and long‑term security strategy.

• 7+ years of experience with Cyber Ark PAM solutions.
• Strong hands‑on expertise with PSM / PSM‑P, Cyber Ark Vault and Credential Providers, and SIA (Secure Infrastructure…