CyberArk PAM Architect: Enterprise Migration & Federation

Bounteous; Newbury; On-site; GBP 110,000 - 150,000; Full time

Job summary

Bounteous is seeking a CyberArk Architect to lead solution design for a large-scale PAM migration and merger consolidation programme, delivering vault migration, identity federation, and onboarding strategy across thousands of accounts and 250+ applications against a fixed regulatory deadline.

You will own migration architecture from CyberArk v12.2 to v14.2, define staged ingestion, manage risk, and mentor engineers while ensuring TSA audit readiness.

Qualifications

• 10+ years in Identity and Access Management
• 5+ years in CyberArk PAM architecture and design
• Experience migrating CyberArk versions at enterprise scale
• Strong knowledge of SAML 2.0 and OIDC federation
• Experience with CP/CCP credential providers and large-scale onboarding
• Experience in regulated environments with audit evidence requirements
• Strong client-facing communication skills

Responsibilities

• Lead end-to-end migration architecture from CyberArk v12.2 to v14.2.
• Design PVWA federation with Entra ID, including MFA migration strategy.
• Define rollback, cutover waves, and TSA audit evidence.
• Mentor CyberArk engineers and present designs to stakeholders.
• Evaluate tooling and onboarding approaches and governance for pilots and production waves

Skills

IAM

CyberArk PAM

Enterprise migration

SAML/OIDC

Stakeholder leadership

Hands-on architecture

Tools

CyberArk PVWA

CyberArk CPM

CyberArk EPV

PSM

Job description

Bounteous is seeking a CyberArk Architect to lead solution design for a large-scale PAM migration and merger consolidation programme, delivering vault migration, identity federation, and onboarding strategy across thousands of accounts and 250+ applications against a fixed regulatory deadline.

You will own migration architecture from CyberArk v12.2 to v14.2, define staged ingestion, manage risk, and mentor engineers while ensuring TSA audit readiness.