Role**
CyberArk Technical Architect
Required Technical Skill Set**
CyberArk, CyberArk Valut, PVWA, CPM, PSM/PSMP, AAM/Conjour, Privilige cloud, Session Recording, Safe Management, PAM, Zero Trust Security
Desired Experience Range**
7 to 10
Location of Requirement
Kolkata,Bangalore,Hyderabad
Desired Competencies (Technical/Behavioral Competency)
Must-Have**
- CyberArk PAM (Vault, PVWA, CPM, PSM)
- CyberArk Privilege Cloud
- Architecture & Design Experience (5+ years)
- Entra ID/AD + ServiceNow Integration
- PowerShell/Python Automation
- HA/DR & Zero Trust Design
- L3/L4 Troubleshooting Experience
- CyberArk Certification (Defender/Sentry/CDE)
Good-to-Have
- CyberArk Conjur / Secrets Manager for DevOps
- CyberArk Endpoint Privilege Manager (EPM)
- CyberArk Secure Web Sessions
- Privilege Cloud Shared Services Architecture
- CyberArk Disaster Recovery Automation
- CyberArk SaaS Migration Experience
Responsibility of / Expectations from the Role
1
Architecture & Design
- Design end-to-end CyberArk PAM architecture for on-premises, hybrid, and cloud environments.
- Define CyberArk reference architecture, HA/DR strategy, and security standards.
- Lead CyberArk Privilege Cloud and Self-Hosted deployments.
- Develop PAM roadmaps aligned with Zero Trust and enterprise security strategies.
2
CyberArk Implementation
- Architect and implement:
- Enterprise Password Vault (EPV)
- Password Vault Web Access (PVWA)
- Central Policy Manager (CPM)
- Privileged Session Manager (PSM/PSMP)
- Application Access Manager (AAM/Secrets Manager)
- Privilege Cloud
- Endpoint Privilege Manager (EPM)
- Lead migration, upgrade, and transformation initiatives
3
Integration & Automation
- Integrate CyberArk with:
- Microsoft Entra ID / Active Directory
- SailPoint, Saviynt, Okta, ForgeRock
- MFA Solutions
- ServiceNow
- Microsoft Sentinel / SIEM platforms
- SSO and PKI solutions
- Develop automation using REST APIs, PowerShell, Python, and scripting frameworks.
- Eliminate hard-coded credentials through secrets management.
4
Security & Governance
- Design Just-In-Time (JIT) access controls.
- Implement Least Privilege and Zero Trust security models.
- Define safe structures, RBAC models, approval workflows, and access governance.
- Support audits, compliance reporting, and regulatory requirements
5
Operations & Leadership
- Provide L3/L4 escalation support.
- Troubleshoot complex CyberArk platform issues.
- Mentor engineering teams and guide stakeholders on PAM best practices.
- Lead solution reviews, technical governance, and architecture approvals.
