CyberArk Architect

Job Title: CyberArk Implementation Architect

Job Overview:

CyberArk Implementation professional

Key Responsibilities:

• Implement and configure CyberArk PAM components (Vault, PVWA, CPM, PSM, PTA)
• Onboard privileged accounts and integrate infrastructure, databases, and applications
• Develop and troubleshooting custom plugins for privileged session management and command control
• Automate tasks using scripting languages and APIs (e.g., PowerShell, Python, REST
• Define and apply access control policies, platforms, and entitlement models
• Manage vault configurations, credential rotation schedules, and session recording
• Perform CyberArk upgrades, patching, backup/restore, and system health monitoring
• Document deployment runbooks, technical designs, and solution configurations
• Collaborate with cross-functional teams for requirements gathering and solution design
• Support audits by providing evidence of access controls, privileged reviews, and compliance report

Required Skills:

• Hands-on experience in

  CyberArk implementation and integration

• Strong understanding of

  PAM concepts

  , session management, and vaulting strategies
• Proficiency with

  directory services

  (Active Directory, LDAP) and authentication protocols (Kerberos, RDP, SSH)
• Experience integrating CyberArk with various endpoints (Windows, Linux, Databases, Network Devices)
• Exposure to

  ticketing system integrations

  (ServiceNow, Remedy)
• Familiarity with security best practices,

  privileged account reviews

  , and compliance requirements
• Excellent communication, troubleshooting, and documentation skills

Technical Skills:

• CyberArk Modules:

  Vault, PVWA, CPM, PSM, PTA

• Scripting:

  PowerShell, Python, AutoIT, Bash

• Integration Tools:

  REST APIs, Application Identity Manager (AIM), PSM connectors

• Platforms:

  Windows, Linux, ESXi, Network Devices

• Cloud & DevOps:

  Azure, AWS, GCP (basic), exposure to CI/CD tools is a plus

• Protocols:

  RDP, SSH, SAML, OAuth, TLS/SSL

Certifications:

Mandatory:

• CyberArk Defender Certification
• CyberArk Sentry Certification

Good to Have:

• CyberArk Guardian Certification