Define the enterprise Privileged Access Management (PAM) architecture, strategy, standards, and multiyear roadmap across on-premises, cloud, and hybrid environments.
Translate security, business, regulatory, and operational requirements into scalable CyberArk solutions that support least privilege, resilience, integration, automation, auditability, and sustainable operations.
Provide technical leadership throughout the solution lifecycle by guiding architecture workshops, requirements reviews, technical design reviews, and solution assurance checkpoints.
Design privileged access models for Safes, platforms, account ownership, access roles, segregation of duties, approval workflows, dual control, and emergency access patterns.
Partner with security, IAM, infrastructure, cloud, network, DevOps, audit, and service-management leaders to align architecture decisions with control effectiveness and delivery outcomes.
What's Needed?
Experience defining enterprise PAM target-state architectures and roadmaps, including assessment of current capabilities, technical debt, control gaps, and modernization priorities.
Strong solution architecture skills for CyberArk components and integrations, including Digital Vault, PVWA, CPM, PSM, PSMP, and Secrets Manager (Conjur) connectors, plus disaster-recovery considerations.
Proficiency designing secure privileged access controls such as credential rotation, verification and reconciliation, session isolation, recording/monitoring, just-in-time access, and privileged-account lifecycle management.
Ability to create integration and automation architecture patterns for directory services, identity governance, MFA, SIEM, IT service management, cloud platforms, DevOps toolchains, and security operations workflows.
Demonstrated capability to govern architecture delivery by validating designs against approved standards, identifying risks and dependencies, and providing technical direction to engineering and implementation teams