CyberArk Architect – PAM Migration Programme

Empiric; Newbury; Hybrid; GBP 90,000 - 120,000; Full time

Job summary

Empiric is seeking a Senior CyberArk Architect to take technical lead on a major PAM migration and consolidation programme. The role is hybrid with 2-3 days onsite and requires owning the architecture and migration strategy, collaborating with senior client stakeholders, and guiding the wider engineering team.

You will lead a large-scale migration from CyberArk v12.2 to v14.2, manage thousands of privileged accounts and 250+ applications, and shape technical direction across EPV, PVWA, CPM, PSM,

Qualifications

• 5+ years of experience with CyberArk architecture and design.
• Experience leading a CyberArk migration, upgrade or transformation.
• Strong background in IAM / PAM architecture.
• Expertise in SAML 2.0, federation and Entra ID.
• Experience with REST APIs and large-scale application onboarding.
• Proven client-facing and stakeholder-management capabilities.
• Experience mentoring or directing engineering teams.

Responsibilities

• Own the CyberArk migration architecture, design decisions and technical roadmap.
• Lead migration across EPV, PVWA, CPM, PSM, AAM / CCP.
• Design CP / CCP onboarding and migration at scale.
• Drive automation through REST APIs.
• Design SAML / OIDC federation and Entra ID integration.
• Support migration from RSA SecurID to Entra MFA.
• Define application segmentation, phased cutovers and go/no-go decisions.
• Produce architecture documentation, migration runbooks and governance controls.
• Present architecture decisions to senior stakeholders.
• Provide technical leadership to CyberArk engineers throughout delivery.

Skills

IAM / PAM architecture

CyberArk architecture

CyberArk migration

REST APIs

SAML 2.0 / Federation

Entra ID integration

Leadership / Stakeholder management

Client-facing

Job description

Hybrid - 2-3 days onsite

ASAP start - ideally within 3 weeks

I'm recruiting for a senior CyberArk Architect to take the technical lead on a major enterprise PAM migration and consolidation programme.

This is not a purely hands-on CyberArk engineering role.

The successful person will initially own the architecture and migration strategy, working directly with senior client stakeholders, before helping shape and provide technical direction to the wider engineering team.

The programme

You'll be leading a large-scale migration from CyberArk v12.2 to v14.2, supporting an enterprise environment with thousands of privileged accounts and 250+ dependent applications.

Key responsibilities will include:

• Owning the CyberArk migration architecture, design decisions and technical roadmap
• Leading migration across EPV, PVWA, CPM, PSM, AAM / CCP
• Designing CP / CCP application onboarding and migration at scale
• Driving automation through REST APIs
• Designing SAML / OIDC federation and Entra ID integration
• Supporting migration from RSA SecurID to Entra MFA
• Defining application segmentation, phased cutovers and go/no-go decisions
• Producing architecture documentation, migration runbooks and governance controls
• Presenting architecture decisions and trade-offs to senior security, compliance and technology stakeholders
• Providing technical leadership and direction to CyberArk engineers throughout delivery

What I'm looking for

Ideally, you'll bring:

• Strong background across IAM / PAM architecture
• 5+ years working specifically with CyberArk architecture and design
• Experience leading a major CyberArk migration, upgrade or transformation
• Strong knowledge of SAML 2.0, federation and Entra ID
• Experience with REST APIs, CP / CCP and large-scale application onboarding
• Background working within complex or regulated enterprise environments
• Strong client-facing and stakeholder-management capability
• Experience leading, mentoring or technically directing engineering teams

The key differentiator here is leadership.

Previous candidates have had strong CyberArk technical skills but lacked the ability to confidently own architecture decisions, challenge stakeholders and lead delivery in front of the client.

If you've personally owned the architecture, presented the solution to senior stakeholders and directed the engineers delivering a CyberArk transformation.

#CyberArk #CyberSecurity #PAM #IAM #CyberArkArchitect #SecurityArchitect #IdentityAccessManagement #ContractJobs #CyberSecurityJobs