Overview

We are looking to hire CyberArk PAM Architect who is available to join immediately or within 30 days. This is a fully remote prospect

The CyberArk PAM Architect is responsible for the design, implementation, operation, and governance of the CyberArk Privileged Access Management platform. The role provides L3+ engineering support and architectural leadership for securing privileged accounts, service accounts, application credentials, and privileged sessions across on-premises, cloud, and hybrid environments.

LOCATION
Remote

EXPERIENCE
15 - 20 years

FUNCTIONAL AREA
Development

Key Responsibilities

CyberArk Platform Management

- Design, deploy, and maintain CyberArk PAM solutions.
- Manage CyberArk components including:
- Digital Vault
- PVWA
- CPM
- PSM
- PSM for SSH
- PTA
- AAM / Conjur
- Perform upgrades, migrations, and platform optimization.
- Ensure platform availability and resiliency.

Privileged Account Governance

- Onboard privileged accounts and systems.
- Define password rotation policies.
- Implement least privilege controls.
- Manage privileged account lifecycle processes.
- Conduct access reviews and compliance reporting.

Service Account & Application Credential Management

- Discover and onboard service accounts.
- Implement credential rotation and reconciliation.
- Manage application secrets using:
- CyberArk AAM
- CyberArk Conjur
- Secure DevOps and CI/CD privileged credentials.

Session Management & Monitoring

- Configure privileged session monitoring and recording.
- Review session recordings during investigations.
- Define alerting and anomaly detection rules.
- Support incident response and forensic investigations.

Cloud & Hybrid PAM

- Integrate CyberArk with:
- Microsoft Entra ID
- Active Directory
- Azure
- AWS
- GCP
- Kubernetes
- Implement cloud privilege governance.
- Secure privileged access for SaaS platforms.

Architecture & Governance





- Define CyberArk standards and best practices.
- Develop PAM roadmaps and implementation strategies.
- Support audits and compliance initiatives.
- Create technical documentation and operational procedures.

Required Technical Skills

CyberArk Technologies

- CyberArk PAM
- Digital Vault
- CPM
- PVWA
- PSM
- PTA
- AAM
- Conjur
- EPM

Infrastructure Technologies

- Active Directory
- LDAP
- Windows Server
- Linux
- VMware
- IIS
- SQL Server

Scripting & Automation

- PowerShell
- REST APIs
- Python
- CyberArk REST API

Security & Governance

- PAM Architecture
- Zero Trust
- Privileged Session Management
- Credential Management
- Secrets Management

Experience Requirements

- 15+ years in Cybersecurity or IAM.
- 12+ years administering and engineering CyberArk PAM.
- Experience with large-scale CyberArk deployments.
- Experience with service account governance and secrets management.
- Experience supporting enterprise environments with strict compliance requirements.

Preferred Certifications

- CyberArk Defender PAM
- CyberArk Sentry PAM
- CyberArk Guardian
- CISSP
- CISM
- Microsoft SC-300
- Microsoft SC-100

Expected Seniority (L3+)

For both roles, the resource should be capable of:

- Leading technical design workshops.
- Acting as an escalation point for L1/L2 teams.
- Creating architecture standards and governance frameworks.
- Driving remediation of security findings.
- Leading IAM/PAM projects independently.
- Mentoring junior engineers and operations teams.




- Engaging with auditors, security architects, and senior stakeholders.

Required Qualifications (Must Have)

- Extensive experience in Active Directory engineering within enterprise environments
- Proven, hands-on expertise in:
- Active Directory Tiering model (Tier 0 / Tier 1 / Tier 2) – mandatory
- Microsoft Entra ID (Azure AD)
- Conditional Access (design & enforcement)
- Privileged Identity Management (PIM)
- Group Policy (GPO)
- Hybrid identity (AD Connect / Entra ID sync)
- Strong experience with:
- Access governance and access reviews
- Identity security and privileged access controls
- Advanced troubleshooting (AD, authentication, identity sync)
- Proven ability to operate as a expert engineer / SME / technical lead

Mandatory Microsoft Certifications

- Microsoft Certified: Identity and Access Administrator Associate (SC-300)
- Microsoft Certified: Windows Server Hybrid Administrator Associate (AZ-800 & AZ-801)

Preferred / Nice to Have

- Experience with PKI / Certificate Services
- Knowledge of Identity Protection and Zero Trust models
- Exposure to ISO 27001 / audit / compliance frameworks
- Microsoft Certified: Cybersecurity Architect Expert (SC-100)

Key Competencies

- Strong security-first mindset
- Deep understanding of privileged access risks and AD Tiering enforcement
- Ability to drive and influence identity architecture decisions
- Strong ownership and accountability in critical environments
- Excellent problem-solving and advanced troubleshooting skills
- Ability to collaborate across security, cloud, and infrastructure teams

Ideal Candidate

- A senior identity expert who owns Active Directory Tiering end-to-end, has strong command of Microsoft Entra ID, Conditional Access, and PIM, and can drive identity security maturity across hybrid environments.

📌 CyberArk PAM Architect (India)
🏢 Atidan Technologies
📍 India