PAM Solution Architect

Summary:

The primary objective of this role is to design and implement a comprehensive CyberArk SaaS architecture for privileged access management (PAM). This includes defining migration strategies and ensuring secure access solutions that comply with operational requirements.

Main Responsibilities:

• Define the CyberArk SaaS target architecture.

• Design the migration approach, including pilot, waves, cutover, and rollback.

• Map safes, accounts, permissions, platforms, and policies to the target state.

• Define identity, authentication, MFA, and access control model.

• Design required integrations with AD/Entra ID, SIEM, ITSM, and monitoring tools.

• Identify technical, security, and operational migration risks.

• Guide implementation teams during configuration, migration, and testing.

• Define and support test scenarios for access, password rotation, session recording, and logging.

• Prepare architecture, migration, operational, and handover documentation.

Key Requirements:

• Proven experience as a PAM/CyberArk Solution Architect.

• Hands-on experience with CyberArk on-premises and SaaS solutions.

• Experience with CyberArk migration projects, preferably from on-premises to SaaS.

• Strong understanding of IAM, privileged access, SSO, MFA, and RBAC.

• Experience with enterprise infrastructure, networking, and hybrid environments.

• Knowledge of security, audit, and compliance requirements for privileged access.

Nice to Have:

• Ability to work effectively with security, infrastructure, operations, applications, and vendor teams.

• Relevant CyberArk certifications preferred: Defender, Sentry, or Guardian.

Other Details:

• Location: Remote

• Years of experience: +10 Years

• Preferred start date/end date: ASAP – 31.12.2027