CyberArk PAM Architect

Technical Requirements

• Creating and implementing strategies for managing privileged access using CyberArk, designing PAM solutions, and ensuring the secure storage, management, and retrieval of sensitive credentials in enterprise environments.
• Developing and enforcing security policies, access controls, and privileged access management procedures using CyberArk capabilities to mitigate security risks and support compliance requirements.
• Design secure and scalable CyberArk PAM solutions, creating High-Level Designs (HLDs) and Low-Level Designs (LLDs) for cloud, on-premises, and hybrid environments while working closely with US-based stakeholders.
• Implement, oversee, and document high-level and low-level designs for CyberArk deployments, defining PAM strategies aligned with business, security, and regulatory requirements.
• Collaborate with automation SPOCs, application teams, and onsite stakeholders to build, test, and optimize PAM-related automation solutions.
• Design, deploy, and support high-performance, highly available CyberArk PAM environments with large-scale target endpoints, creating workflows, custom connectors, policies, and integrations.
• Should be capable of deploying, installing, and configuring CyberArk components (Vault, CPM, PVWA, PSM, PSMP, AIM/CCP) as per client requirements.
• Develop custom plugins, integrations, and connectors for CyberArk CPM/PSM Password Safe/PRA components, as required.
• Hands-on experience or knowledge in configuring CyberArk PTA, Endpoint Privilege Management (EPM) and privileged access monitoring capabilities.
• Integrating various platforms with CyberArk, including Windows, UNIX/Linux, databases, network devices, SSH keys, cloud platforms, SAP, and enterprise applications.
• Creating and managing Safes, platforms, owners, vault policies, asset groups, account management policies, and access controls within CyberArk environments.
• Should be familiar with CyberArk Password Upload Utility, PACLI, REST APIs, and corresponding administration, onboarding, and integration utilities/tools.
• Experience in integrating CyberArk solutions with LDAP/Active Directory, SIEM, SNMP, MFA, and other identity and access management systems.
• Strong scripting skills using PowerShell, Python, Shell scripting, or APIs to automate tasks, develop integrations, and customize CyberArk solutions.
• Knowledge of regulatory requirements and industry standards related to privileged access management, including NIST, CIS, SOX, PCI-DSS, HIPAA, and GDPR.
• Experience with security monitoring tools and integrating CyberArk with Security Information and Event Management (SIEM) platforms; ability to support client workshops, design discussions, and solution reviews in an onsite US-facing environment.