CyberArk Architect

Senior CyberArk Architect — Privileged Access Management Multi-year contract Onsite in NYC Min 3 days a week Overview We are seeking a Senior CyberArk Architect to lead the design, implementation, and evolution of enterprise-scale Privileged Access Management (PAM) solutions across complex hybrid environments. This role requires a hands‑on architect who has successfully owned large‑scale CyberArk deployments from strategy through production, delivering secure, scalable, and operationally mature PAM capabilities. The ideal candidate brings deep expertise in CyberArk architecture, privileged identity security, and enterprise infrastructure, with experience designing solutions that support large volumes of privileged accounts across on‑premises, cloud, and hybrid environments. You will be responsible for defining target‑state architecture, establishing design standards, driving technical requirements across infrastructure and security teams, and ensuring all solutions are scalable, resilient, and audit‑ready. Key Responsibilities Design and own end-to-end CyberArk architecture, including vault topology, disaster recovery strategy, replication design, high availability, and component placement across hybrid environments. Develop scalable Safe hierarchy structures, role-based access models, and platform organization supporting large-scale privileged account management. Architect PSM and PSMP environments, including session routing, connection component strategy, and secure access across segmented network zones. Design and implement CyberArk Privilege Cloud integration and hybrid deployment models. Lead Secure Infrastructure Access (SIA) architecture for dynamic and just-in-time privileged access use cases. Establish platform design standards for CPM, SRS, credential rotation, reconciliation workflows, and exception handling. Stakeholder Collaboration Partner with infrastructure, cloud, database, networking, middleware, and security teams to define onboarding requirements, access models, and operational standards. Collaborate with network and security teams to establish firewall requirements, proxy architectures, communication paths, and segmentation controls. Work closely with identity, governance, and security architecture teams on integrations with identity providers, SIEM platforms, ticketing systems, and compliance reporting solutions. Present architectural recommendations and design decisions to technical leadership, risk management, audit, and security stakeholders. Governance & Standards Develop enterprise standards for Safe design, naming conventions, onboarding methodologies, and operational procedures. Define monitoring, alerting, upgrade, patching, and capacity‑planning strategies. Establish credential lifecycle management standards including rotation policies, reconciliation processes, emergency access procedures, and dual‑control workflows. Ensure solutions align with regulatory, security, and audit requirements. Technical Leadership Provide architectural oversight and guidance to implementation and engineering teams. Review platform configurations, deployment strategies, and solution designs. Lead resolution of complex technical challenges involving privileged account onboarding, session management, authentication dependencies, and cross‑environment integrations. Serve as the primary escalation point for advanced CyberArk architectural and operational issues. Coordinate with vendors and support organizations on product enhancements, escalations, and roadmap alignment. Required Qualifications 7+ years of hands‑on CyberArk architecture and engineering experience. Proven ownership of large‑scale CyberArk implementations supporting enterprise privileged access management programs. Deep expertise in Digital Vault architecture, installation, hardening, replication, disaster recovery, failover testing, and performance optimization. Advanced knowledge of Safe design, RBAC modeling, permission structures, CPM assignment strategies, and platform‑to‑safe mapping. Extensive experience with Secure Infrastructure Access (SIA), including architecture, connector deployment, and policy design. Expert‑level knowledge of PSM and PSMP architecture, session management, HTML5 Gateway, load balancing, and session recording. Strong experience designing and supporting CPM platforms, including custom platform development, plugin customization, credential rotation logic, and troubleshooting. Experience implementing and supporting CyberArk Privilege Cloud and hybrid PAM environments. Strong understanding of network security principles, firewall requirements, proxy architectures, and segmented network environments. Excellent communication skills with the ability to translate technical concepts into business and risk‑focused discussions. Preferred Qualifications CyberArk Sentry, Guardian, or equivalent certifications. Experience with CyberArk Secrets Manager, Conjur, Secrets Hub, or Cloud Entitlements Manager. Exposure to Endpoint Privilege Manager (EPM) and workforce identity security solutions. Background in Active Directory, PKI, enterprise authentication, and infrastructure architecture. Experience deploying CyberArk solutions using Infrastructure as Code (Terraform, Ansible, or similar automation tools). Familiarity with highly regulated or compliance‑driven environments. Success Measures Within the first 6–12 months, success in this role may include: Establishing and documenting a target‑state CyberArk architecture and implementation roadmap. Deploying and validating resilient vault and disaster recovery environments. Defining scalable Safe hierarchies, RBAC models, and platform onboarding standards. Successfully onboarding critical privileged account platforms into production. Implementing secure access architectures across multiple network zones and environments. Establishing operational processes, monitoring, alerting, and support procedures for long‑term platform stability and growth. Why Join This role offers the opportunity to own and influence a strategic privileged access security program from architecture through delivery. You will play a key role in securing critical infrastructure, driving enterprise security modernization, and shaping the future state of privileged identity management within a complex technology environment. #J-18808-Ljbffr Gotham Technology Group