CyberArk Architect

Job Summary

Leading solution design for a large-scale Privileged Access Management (PAM) migration, the contract CyberArk Architect will work remotely to manage vault migration architecture, identity federation, and application onboarding for an extensive account estate with a fixed regulatory deadline.

Key responsibilities

• Design end-to-end migration architecture from CyberArk v12.2 to v14.2, including entity extraction and staged loading into the target vault
• Lead discovery and design of the application onboarding strategy for over 250 dependent applications, ensuring proper sequencing and timeline management
• Architect identity federation solutions, including SAML/OIDC integration and MFA migration, while maintaining compliance with regulatory standards

Required qualifications

• 10+ years in Identity and Access Management, with at least 5 years in CyberArk PAM architecture and design
• Deep hands-on knowledge of CyberArk EPV, PVWA, CPM, PSM, AAM/CCP, and Vault architecture
• Proven experience leading enterprise-scale CyberArk version migrations
• Strong working knowledge of SAML 2.0 and OIDC federation design with enterprise IdP integration experience
• Experience in regulated environments with formal change control and audit evidence requirements