CyberArk Solutions Architect

Job Title: PAM Solutions Architect CyberArk SME

Location:

Duration:

Work Arrangement:

Yearly Salary: 40-55 lpa

Overview

CyberArk Solutions Architect (PAM SME)

Certifications

• Mandatory:

  CyberArk Sentry / Defender

• Optional:

  CyberArk CDE

Key Responsibilities

• Lead the

  architecture, design, and implementation

  of CyberArk PAM solutions, including Core-PAS components (EPV, DR, HA EPV, PVWA, PSM, PSMP, CPM).
• Implement and configure

  Privileged Threat Analytics (PTA)

  and advanced modules (AAMCP, AAMCCP); experience with Alero and HTML5 is a plus.
• Integrate CyberArk with enterprise systems such as

  SIEM, SNMP, SMTP, SAML, LDAPS

  , and

  Active Directory (Microsoft AD / Azure AD)

  .
• Develop

  custom connection components

  and

  CPM plug-ins

  (SSH, web-based apps) using Auto-IT, PowerShell, or Python.
• Prepare and review

  high-level and detailed architecture designs, project plans, and documentation

  (HLD, DTD, SoP, KEDB, Breakglass, etc.).
• Support automation initiatives and assist developers/testers in leveraging

  CyberArk REST APIs

  for integration and workflow improvements.
• Conduct

  PAM access reviews

  , define privileged access policies, and ensure enforcement of

  least privilege principles

  .
• Perform

  DNA scans

  , create discovery rules, and support onboarding of device types including Windows, *Nix, network, database, SAP, and web applications.
• Collaborate with cybersecurity and IAM teams to align PAM strategy with enterprise identity initiatives.
• Provide

  technical consulting and stakeholder management

  for global delivery teams and U.S.-based clients.
• Support colleagues across support and project teams with complex CyberArk-related queries and troubleshooting.

Required Skills and Experience

• 10+ years

  of experience in Identity & Access Management (IAM) with a strong focus on

  Privileged Access Management (PAM)

  using CyberArk.
• Proven experience designing, integrating, and managing CyberArk solutions at

  enterprise scale

  .
• Strong understanding of

  privileged access lifecycle

  (onboarding, elevation, approval, auditing).
• Proficiency with

  one or more programming languages

  (PowerShell, Python preferred).
• Familiarity with

  Microsoft Entra ID PIM

  and other IAM tools (SailPoint, ISIM) is an advantage.
• Knowledge of

  Access Modules

  (e.g., Azure SSO, ISAM) and

  PAM reporting tools

  (PAS Reporter, Telemetry, Export Vault Data).
• Excellent communication, documentation, and

  stakeholder engagement

  skills.

Preferred Qualifications

• Knowledge of additional PAM solutions beyond CyberArk.
• Experience working in

  global enterprise environments

  with distributed teams.

technical PAM architecture and controls