Job Description: PAM System Architect (10+ Years Experience)
Role Overview
We are looking for an experienced CyberArk System Architect with over 10 years of hands-on expertise in architecting, upgrading, and migrating CyberArk environments. The ideal candidate will be highly proficient in CyberArk OnPrem & Cloud with significant experience performing major platform upgrades, Vault migrations, OS upgrades, and multi-environment deployments.
The candidate must also possess strong infrastructure troubleshooting skills, excellent understanding of enterprise systems, and the ability to diagnose and resolve complex infra issues quickly and effectively.
Key Responsibilities
CyberArk Architecture/Design & Migration/Upgrade Implementation
- Design scalable, secure, and high-availability CyberArk enterprise architectures.
- Develop architecture blueprints, technical specifications, and standard deployment patterns.
- Lead end-to-end design for Vault topology, disaster recovery, and multi-site deployments.
- Execute large-scale CyberArk migrations including account onboarding, credential moves, and system consolidation.
- Perform Vault upgrades, component upgrades (PVWA, CPM, PSM, PSMP), and OS-level upgrades across Windows/Linux servers.
- Lead new environment setup, secure hardening, and component integration in enterprise ecosystems.
Infrastructure Expertise & Issue Resolution
- Quickly diagnose and fix complex infra issues including OS, networking, firewall, DNS, certificates, and connectivity problems.
- Work directly with infrastructure teams (Windows, Linux, Network, AD, Cloud) to resolve cross-domain issues.
- Perform root cause analysis and provide long-term solutions to improve stability and performance.
CyberArk Operations & Optimization
- Establish platform governance, operational best practices, and lifecycle management processes.
- Optimize platforms for performance, scalability, and compliance requirements.
- Design safe structures, onboarding workflows, and secure access models.
Technical Leadership
- Act as the CyberArk SME for all architecture, migration, and infra troubleshooting activities.
- Mentor engineering teams and provide technical guidance during critical upgrades or outages.
- Collaborate with security, infra, and application teams to ensure seamless CyberArk adoption.
Required Skills & Experience
- 10+ years of hands-on experience with CyberArk PAS.
- CyberArk certifications (CDE.) is mandatory – CyberArk Defender/Sentry
- Strong expertise in:
- CyberArk Vault architecture & migrations
- PVWA, CPM, PSM, PSMP installation and upgrades
- Component OS upgrades and secure hardening
- Deep understanding of Windows, Linux, networking, AD, DNS, load balancers, firewalls.
- Strong troubleshooting skills with the ability to resolve infrastructure and platform-level issues rapidly.
- Hands-on experience in SSL/TLS certificate configuration and lifecycle management.
- Experience in designing, documenting, and executing PAM architectural standards.
Preferred Qualifications
- Experience in cloud environments (AWS, Azure, GCP).
- Knowledge of scripting/automation (PowerShell, Python).
- Exposure to DevOps pipelines and secrets management.
Pay: ₹366,807.03 - ₹1,924,169.07 per year
Work Location: In person
