cyberark Architect

CyberArk Technical Architect

Required Technical Skill Set**

CyberArk, CyberArk Valut, PVWA, CPM, PSM/PSMP, AAM/Conjour, Privilige cloud, Session Recording, Safe Management, PAM, Zero Trust Security

Desired Experience Range**

7 to 10

Location of Requirement

Kolkata,Bangalore,Hyderabad

Desired Competencies (Technical/Behavioral Competency)

Must-Have**

\n
• CyberArk PAM (Vault, PVWA, CPM, PSM)
\n
• CyberArk Privilege Cloud
\n
• Architecture & Design Experience (5+ years)
\n
• Entra ID/AD + ServiceNow Integration
\n
• PowerShell/Python Automation
\n
• HA/DR & Zero Trust Design
\n
• L3/L4 Troubleshooting Experience
\n
• CyberArk Certification (Defender/Sentry/CDE)
\n

Good-to-Have

\n
• CyberArk Conjur / Secrets Manager for DevOps
\n
• CyberArk Endpoint Privilege Manager (EPM)
\n
• CyberArk Secure Web Sessions
\n
• Privilege Cloud Shared Services Architecture
\n
• CyberArk Disaster Recovery Automation
\n
• CyberArk SaaS Migration Experience
\n

Responsibility of / Expectations from the Role

1

Architecture & Design

\n
• Design end-to-end CyberArk PAM architecture for on-premises, hybrid, and cloud environments.
\n
• Define CyberArk reference architecture, HA/DR strategy, and security standards.
\n
• Lead CyberArk Privilege Cloud and Self-Hosted deployments.
\n
• Develop PAM roadmaps aligned with Zero Trust and enterprise security strategies.
\n

2

CyberArk Implementation

\n
• Architect and implement:
\n
• Enterprise Password Vault (EPV)
\n
• Password Vault Web Access (PVWA)
\n
• Central Policy Manager (CPM)
\n
• Privileged Session Manager (PSM/PSMP)
\n
• Application Access Manager (AAM/Secrets Manager)
\n
• Privilege Cloud
\n
• Endpoint Privilege Manager (EPM)
\n
• Lead migration, upgrade, and transformation initiatives
\n

3

Integration & Automation

\n
• Integrate CyberArk with:
\n
• Microsoft Entra ID / Active Directory
\n
• SailPoint, Saviynt, Okta, ForgeRock
\n
• MFA Solutions
\n
• ServiceNow
\n
• Microsoft Sentinel / SIEM platforms
\n
• SSO and PKI solutions
\n
• Develop automation using REST APIs, PowerShell, Python, and scripting frameworks.
\n
• Eliminate hard-coded credentials through secrets management.
\n

4

Security & Governance

\n
• Design Just-In-Time (JIT) access controls.
\n
• Implement Least Privilege and Zero Trust security models.
\n
• Define safe structures, RBAC models, approval workflows, and access governance.
\n
• Support audits, compliance reporting, and regulatory requirements
\n

5

Operations & Leadership

\n
• Provide L3/L4 escalation support.
\n
• Troubleshoot complex CyberArk platform issues.
\n
• Mentor engineering teams and guide stakeholders on PAM best practices.
\n
• Lead solution reviews, technical governance, and architecture approvals.
\n