Associate Principal Engineer PAM System Architect (CyberArk Architect)

REQUIREMENTS:

• Total experience: 9+ years.
• Strong hands-on experience with CyberArk Privileged Access Security (PAS) architecture, implementation, and administration.
• Must-have expertise in CyberArk Vault architecture, migrations, and enterprise PAM solution design.
• Strong experience performing CyberArk component upgrades, including PVWA, CPM, PSM, and PSMP, along with Windows and Linux OS upgrades.
• Hands-on experience designing high-availability, disaster recovery, and multi-site CyberArk deployments.
• Strong knowledge of Windows, Linux, Active Directory, DNS, networking, firewalls, load balancers, and SSL/TLS certificate management.
• Experience executing large-scale CyberArk migrations, including account onboarding, credential migration, and environment consolidation.
• Strong expertise in platform governance, secure hardening, lifecycle management, and privileged access operational best practices.
• Experience diagnosing and resolving complex infrastructure, platform, and connectivity issues across enterprise environments.
• Strong experience creating CyberArk architecture standards, technical documentation, and deployment blueprints.
• Good-to-have CyberArk CDE certification.
• Good-to-have experience with AWS, Azure, or GCP, PowerShell/Python scripting, and DevOps pipelines with secrets management.
• Strong leadership, stakeholder management, analytical, problem-solving, mentoring, and communication skills.

RESPONSIBILITIES:

• Lead the architecture, design, and implementation of enterprise CyberArk Privileged Access Management (PAM) solutions.
• Design scalable, secure, and highly available CyberArk Vault architectures, including disaster recovery and multi-site deployments.
• Execute CyberArk Vault migrations, platform consolidations, and enterprise-wide account onboarding initiatives.
• Perform CyberArk component upgrades (PVWA, CPM, PSM, PSMP) and Windows/Linux OS upgrades while ensuring minimal business disruption.
• Design and implement secure CyberArk environments with infrastructure hardening and enterprise system integrations.
• Troubleshoot and resolve complex infrastructure issues involving Windows, Linux, networking, Active Directory, DNS, firewalls, certificates, and connectivity.
• Establish CyberArk platform governance, operational best practices, lifecycle management processes, and secure access models.
• Develop architecture blueprints, technical standards, deployment documentation, and implementation best practices.
• Collaborate with infrastructure, security, cloud, and application teams to ensure seamless CyberArk adoption and platform stability.
• Mentor engineering teams and provide technical leadership during architecture reviews, migrations, upgrades, and critical production incidents.
• Implement automation and operational improvements using PowerShell, Python, and DevOps practices where applicable.
• Stay updated with emerging CyberArk capabilities, cloud security trends, PAM best practices, and enterprise security standards.

Bachelor’s or master’s degree in computer science, Information Technology, or a related field.