PAM Solution Architect

Summary

The primary objective of this role is to design and implement a comprehensive CyberArk SaaS architecture for privileged access management (PAM). This includes defining migration strategies and ensuring secure access solutions that comply with operational requirements.

Main Responsibilities

• Define the CyberArk SaaS target architecture.
• Design the migration approach, including pilot, waves, cutover, and rollback.
• Map safes, accounts, permissions, platforms, and policies to the target state.
• Define identity, authentication, MFA, and access control model.
• Design required integrations with AD/Entra ID, SIEM, ITSM, and monitoring tools.
• Identify technical, security, and operational migration risks.
• Guide implementation teams during configuration, migration, and testing.
• Define and support test scenarios for access, password rotation, session recording, and logging.
• Prepare architecture, migration, operational, and handover documentation.

Key Requirements

• Proven experience as a PAM/CyberArk Solution Architect.
• Hands-on experience with CyberArk on-premises and SaaS solutions.
• Experience with CyberArk migration projects, preferably from on-premises to SaaS.
• Strong understanding of IAM, privileged access, SSO, MFA, and RBAC.
• Experience with enterprise infrastructure, networking, and hybrid environments.
• Knowledge of security, audit, and compliance requirements for privileged access.

Nice to Have

• Ability to work effectively with security, infrastructure, operations, applications, and vendor teams.
• Relevant CyberArk certifications preferred: Defender, Sentry, or Guardian.

Other Details

• Location: Remote
• Years of experience: +10 Years
• Preferred start date/end date: ASAP - 31.12.2027