Cyberark Architect

Greetings from TCS!!!

Role: CyberArk Architect

Experience: 7 to 10 years

Location: Kolkata/HYD/Bangalore

Job Description:

Architecture & Design

\n
• Design end-to-end CyberArk PAM architecture for on-premises, hybrid, and cloud environments.
\n
• Define CyberArk reference architecture, HA/DR strategy, and security standards.
\n
• Lead CyberArk Privilege Cloud and Self-Hosted deployments.
\n
• Develop PAM roadmaps aligned with Zero Trust and enterprise security strategies.
\n

CyberArk Implementation

\n
• Architect and implement:
\n
• Enterprise Password Vault (EPV)
\n
• Password Vault Web Access (PVWA)
\n
• Central Policy Manager (CPM)
\n
• Privileged Session Manager (PSM/PSMP)
\n
• Application Access Manager (AAM/Secrets Manager)
\n
• Privilege Cloud
\n
• Endpoint Privilege Manager (EPM)
\n
• Lead migration, upgrade, and transformation initiatives
\n

Integration & Automation

\n
• Integrate CyberArk with:
\n
• Microsoft Entra ID / Active Directory
\n
• SailPoint, Saviynt, Okta, ForgeRock
\n
• MFA Solutions
\n
• ServiceNow
\n
• Microsoft Sentinel / SIEM platforms
\n
• SSO and PKI solutions
\n
• Develop automation using REST APIs, PowerShell, Python, and scripting frameworks.
\n
• Eliminate hard-coded credentials through secrets management.
\n

Security & Governance

\n
• Design Just-In-Time (JIT) access controls.
\n
• Implement Least Privilege and Zero Trust security models.
\n
• Define safe structures, RBAC models, approval workflows, and access governance.
\n
• Support audits, compliance reporting, and regulatory requirements
\n

Operations & Leadership

\n
• Provide L3/L4 escalation support.
\n
• Troubleshoot complex CyberArk platform issues.
\n
• Mentor engineering teams and guide stakeholders on PAM best practices.
\n
• Lead solution reviews, technical governance, and architecture approvals.
\n