Posted 30 August, 2026
CyberArk Technical Architect
Tata Consultancy Services
VasanthaNagar, KA, IN
Full Time
Reference: c661e1a4e375c012
Job Description
\n\n
Role**
\nCyberArk Technical Architect
\nRequired Technical Skill Set**
\nCyberArk, CyberArk Valut, PVWA, CPM, PSM/PSMP, AAM/Conjour, Privilige cloud, Session Recording, Safe Management, PAM, Zero Trust Security
\nDesired Experience Range**
\n7 to 10
\nLocation of Requirement
\nKolkata,Bangalore,Hyderabad
\nDesired Competencies (Technical/Behavioral Competency)
\nMust-Have**
\n- \n
- CyberArk PAM (Vault, PVWA, CPM, PSM) \n
- CyberArk Privilege Cloud \n
- Architecture & Design Experience (5+ years) \n
- Entra ID/AD + ServiceNow Integration \n
- PowerShell/Python Automation \n
- HA/DR & Zero Trust Design \n
- L3/L4 Troubleshooting Experience \n
- CyberArk Certification (Defender/Sentry/CDE) \n
Good-to-Have
\n- \n
- CyberArk Conjur / Secrets Manager for DevOps \n
- CyberArk Endpoint Privilege Manager (EPM) \n
- CyberArk Secure Web Sessions \n
- Privilege Cloud Shared Services Architecture \n
- CyberArk Disaster Recovery Automation \n
- CyberArk SaaS Migration Experience \n
Responsibility of / Expectations from the Role
\n1
\nArchitecture & Design
\n- \n
- Design end-to-end CyberArk PAM architecture for on-premises, hybrid, and cloud environments. \n
- Define CyberArk reference architecture, HA/DR strategy, and security standards. \n
- Lead CyberArk Privilege Cloud and Self-Hosted deployments. \n
- Develop PAM roadmaps aligned with Zero Trust and enterprise security strategies. \n
2
\nCyberArk Implementation
\n- \n
- Architect and implement: \n
- Enterprise Password Vault (EPV) \n
- Password Vault Web Access (PVWA) \n
- Central Policy Manager (CPM) \n
- Privileged Session Manager (PSM/PSMP) \n
- Application Access Manager (AAM/Secrets Manager) \n
- Privilege Cloud \n
- Endpoint Privilege Manager (EPM) \n
- Lead migration, upgrade, and transformation initiatives \n
3
\nIntegration & Automation
\n- \n
- Integrate CyberArk with: \n
- Microsoft Entra ID / Active Directory \n
- SailPoint, Saviynt, Okta, ForgeRock \n
- MFA Solutions \n
- ServiceNow \n
- Microsoft Sentinel / SIEM platforms \n
- SSO and PKI solutions \n
- Develop automation using REST APIs, PowerShell, Python, and scripting frameworks. \n
- Eliminate hard-coded credentials through secrets management. \n
4
\nSecurity & Governance
\n- \n
- Design Just-In-Time (JIT) access controls. \n
- Implement Least Privilege and Zero Trust security models. \n
- Define safe structures, RBAC models, approval workflows, and access governance. \n
- Support audits, compliance reporting, and regulatory requirements \n
5
\nOperations & Leadership
\n- \n
- Provide L3/L4 escalation support. \n
- Troubleshoot complex CyberArk platform issues. \n
- Mentor engineering teams and guide stakeholders on PAM best practices. \n
- Lead solution reviews, technical governance, and architecture approvals. \n