PAM System Architect

Project description

We are looking for an experienced CyberArk System Architect with over 10 years of hands on expertise in architecting, upgrading, and migrating CyberArk environments. The ideal candidate will be highly proficient in CyberArk OnPrem & Cloud with significant experience performing major platform upgrades, Vault migrations, OS upgrades, and multi environment deployments. The candidate must also possess strong infrastructure troubleshooting skills, excellent understanding of enterprise systems, and the ability to diagnose and resolve complex infra issues quickly and effectively.

Responsibilities

• CyberArk Architecture/Design & Migration/Upgrade Implementation
• Design scalable, secure, and high availability CyberArk enterprise architectures.
• Develop architecture blueprints, technical specifications, and standard deployment patterns.
• Lead end to end design for Vault topology, disaster recovery, and multi site deployments.
• Execute large-scale CyberArk migrations including account onboarding, credential moves, and system consolidation.
• Perform Vault upgrades, component upgrades (PVWA, CPM, PSM, PSMP), and OS-level upgrades across Windows/Linux servers.
• Lead new environment setup, secure hardening, and component integration in enterprise ecosystems. Infrastructure Expertise & Issue Resolution
• Quickly diagnose and fix complex infra issues including OS, networking, firewall, DNS, certificates, and connectivity problems.
• Work directly with infrastructure teams (Windows, Linux, Network, AD, Cloud) to resolve cross-domain issues.
• Perform root cause analysis and provide long-term solutions to improve stability and performance. CyberArk Operations & Optimization
• Establish platform governance, operational best practices, and lifecycle management processes.
• Optimize platforms for performance, scalability, and compliance requirements.
• Design safe structures, onboarding workflows, and secure access models. Technical Leadership
• Act as the CyberArk SME for all architecture, migration, and infra troubleshooting activities.
• Mentor engineering teams and provide technical guidance during critical upgrades or outages.
• Collaborate with security, infra, and application teams to ensure seamless CyberArk adoption.

SKILLS

Must have

• 10+ years of hands on experience with CyberArk PAS.
• CyberArk certifications (CDE.).
• Strong expertise in: o CyberArk Vault architecture & migrations o PVWA, CPM, PSM, PSMP installation and upgrades o Component OS upgrades and secure hardening
• Deep understanding of Windows, Linux, networking, AD, DNS, load balancers, firewalls.
• Strong troubleshooting skills with the ability to resolve infrastructure and platform-level issues rapidly.
• Hands-on experience in SSL/TLS certificate configuration and lifecycle management.
• Experience in designing, documenting, and executing PAM architectural standards.

Nice to have

• Experience in cloud environments (AWS, Azure, GCP). • Knowledge of scripting/automation (PowerShell, Python). • Exposure to DevOps pipelines and secrets management.