CyberArk Architecture L3 Specialist

Onepoint; Montreal; Hybrid; CAD 120,000 - 160,000; Full time

Benefits offered by this job

Vacation 3 weeks

Group insurance

RRSP contribution

Remote/On-site flexibility

Office perks (fresh fruit, beverages)

Job summary

Wepoint is seeking a Senior CyberArk Architect to lead redesign and migration of CyberArk infrastructure, including PSM servers, into a new network environment while ensuring production stability in a high‑tolerance environment.

You will combine hands‑on implementation with strong architecture and rigorous planning, testing and change control, delivering detailed diagrams and documentation and coordinating stakeholders across security, network and operations teams.

Qualifications

• Experience with CyberArk Privileged Access Management environments in production.
• Senior expertise in CyberArk architecture, infrastructure and PSM deployment.
• Proven migration or redesign of CyberArk infrastructure in complex production environments.
• Strong understanding of network architecture, firewall rules, and high availability.
• Experience with migrations, test strategy, rollback planning and change management.
• Ability to produce detailed architecture diagrams and technical documentation.
• Strong troubleshooting, autonomy and ownership in critical environments.

Responsibilities

• Design the target CyberArk architecture and define the migration approach.
• Move CyberArk PSM servers between network environments without production disruption.
• Analyze network dependencies and coordinate firewall rules, network flows and required openings.
• Perform hands-on CyberArk infrastructure configuration and implementation.
• Prepare and execute migration plans, technical validation, testing and rollback procedures.
• Lead technical change-management activities and coordinate the stakeholders involved.
• Redesign and maintain CyberArk architecture documentation, including network diagrams.
• Ensure the target architecture meets security, resilience and operational requirements.
• Contribute to project planning, risk management and technical activity tracking.

Skills

CyberArk Privileged Access Management

CyberArk architecture

PSM deployment

Network architecture

Migration planning

Documentation & diagrams

Troubleshooting & ownership

Tools

CyberArk

Job description

Company Description

Wepoint is the architect of major transformations for businesses and public sector organizations.

We support our clients from strategy through technological implementation, always striving to think beyond the obvious and to act within the framework of Economic, Social, Environmental, and Technological Responsibility (RESET). Our goal is to create new ways of working, new economic models, and smarter environments.

In nearly 20 years, we have become one of the key players in digital transformation, employing 3,500 people across Europe, Tunisia, North America, and the Asia-Pacific region.

What We Are Looking For

COURAGE – AUTHENTICITY – OPENNESS – COMMITMENT – ELEGANCE

Do these words resonate with you? They are our company values.

At Wepoint, we are looking for committed talents who are ready to share their expertise within open and collaborative teams, and who are not afraid to take initiative. We also value people who are able to challenge themselves and continuously improve.

At the heart of relationships at Wepoint are authenticity and the constant pursuit of excellence for our clients — this is what we expect from our future colleagues.

Job description

We are looking for a Senior CyberArk Architect to support a strategic infrastructure initiative. The mission focuses on redesigning and migrating part of the CyberArk infrastructure, including PSM servers, to a new network environment while maintaining full production stability.

The environment has a very low tolerance for disruption. The Architect must combine strong architecture expertise with hands‑on implementation capabilities and rigorous planning, testing and change control.

Responsibilities

• Design the target CyberArk architecture and define the migration approach.
• Move CyberArk PSM servers between network environments without production disruption.
• Analyze network dependencies and coordinate firewall rules, network flows and required openings.
• Perform hands‑on CyberArk infrastructure configuration and implementation.
• Prepare and execute migration plans, technical validation, testing and rollback procedures.
• Lead technical change‑management activities and coordinate the stakeholders involved.
• Redesign and maintain CyberArk architecture documentation, including network diagrams.
• Ensure the target architecture meets security, resilience and operational requirements.
• Contribute to project planning, risk management and technical activity tracking.

Required Skills & Experience

• Strong hands‑on experience with CyberArk Privileged Access Management environments.
• Senior expertise in CyberArk architecture, infrastructure and PSM deployment.
• Proven experience migrating or redesigning CyberArk infrastructure in complex production environments.
• Strong understanding of network architecture, firewall rules, network flows and high availability.
• Experience with production migrations, test strategy, rollback planning and change management.
• Ability to produce detailed architecture diagrams and technical documentation.
• Strong troubleshooting skills, autonomy and ownership in business‑critical environments.

Nice to Have

• Knowledge of CyberArk Conjur.
• Experience within banking or another highly regulated environment.
• Exposure to DORA‑related resilience initiatives.
• Experience working with globally distributed infrastructure teams.
• Experience with large‑scale CyberArk consolidation or infrastructure harmonization programs.

Only candidates who are legally authorized to work for any employer in Canada will be considered.

Wepoint Benefits

• Minimum of 3 weeks of vacation starting from the first year;
• Comprehensive group insurance with a generous employer contribution;
• Employer contribution to a group RRSP;
• Full remote work flexibility: Hybrid, Remote, or On‑site;
• A warm, bright, and welcoming office offering fresh fruit, coffee, beverages, occasional meals, etc.;
• Annual IT equipment budget;
• A balanced work environment with flexible working hours;
• Career development: training and certifications, online or in‑person learning, Wepoint Academy, etc.;
• An international community of experts ready to share their knowledge;
• A company culture focused on individuals’ needs and their belonging to a strong community.

#tech & security

Permis CNESST : AP-2504754, AP-2504755, AR-2504756