Privileged Access Management (PAM) Architect – CyberArk

About the role

The PAM Architect will design, implement and own the privileged access management architecture across cloud, hybrid and on‑premise environments, with a focus on CyberArk. You will work closely with security, IAM and platform teams to automate privileged account lifecycle and improve the organisation’s security posture.

Key responsibilities

• Design and operate enterprise‑wide PAM solutions based on CyberArk, covering human and non‑human privileged identities.
• Lead hands‑on deployment, configuration and high‑availability setup of CyberArk vaulting, session management, credential rotation and onboarding/off‑boarding workflows.
• Automate privileged account provisioning, safes, platforms and policies using PowerShell, Python and Bash.
• Integrate CyberArk with identity providers, SSO/MFA, directory services and Azure cloud resources.
• Implement secure machine‑to‑machine access patterns for service accounts, APIs, keys and certificates across Windows and Linux workloads.
• Drive adoption of session recording, command control policies and audit evidence retention.
• Define PAM standards, reference architectures, hardening baselines and emergency access procedures.

Required profile

• Bachelor’s or Master’s degree in Computer Science, Cybersecurity, Information Systems or related field.
• 8–12+ years of experience in identity security, PAM engineering or security architecture.
• Proven experience designing and implementing CyberArk solutions in enterprise or regulated environments.
• Hands‑on experience with Windows, Linux/Unix, databases, network devices and cloud platforms (Azure, AWS, GCP).
• Ability to advise senior stakeholders on privileged access risks and remediation strategies.

Required skills

• CyberArk (Vault, Session Manager, Credential Rotation)
• Python, PowerShell, Bash scripting
• Windows and Linux system administration
• Azure cloud services and IAM integration
• Identity providers, SSO, MFA, directory services
• CI/CD pipelines and DevOps tooling

What we offer

• Attractive remuneration and hybrid working policy
• Opportunities for continuous training, certifications and exposure to cutting‑edge technologies
• Modern office environment with additional health and life insurance
• Access to 50+ benefits and services
• Work on challenging projects for global clients in a multicultural organisation