CyberArk PAM Architect: Enterprise Migration Lead

Bounteous; Greater London; Presencial; GBP 120 000 - 185 000; Tempo integral

Resumo da oferta

Bounteous is seeking a CyberArk Architect in Newbury, UK to lead solution design for a large-scale Privileged Access Management migration and merger consolidation programme. The role spans vault migration design, identity federation, and onboarding strategy for thousands of accounts and 250+ applications, under a strict regulatory deadline.

The candidate will own architecture decisions, drive technical direction, and mentor engineers while ensuring audit evidence supports TSA compliance and

Qualificações

• 10+ years in Identity and Access Management
• 5+ years specifically in CyberArk PAM architecture and design
• Hands-on knowledge of CyberArk components (EPV, PVWA, CPM, PSM, AAM/CCP)
• Experience migrating CyberArk versions enterprise-scale (v10–v14)
• Strong knowledge of SAML 2.0 and OIDC federation with IdP integrations
• Experience with CP/CCP credential providers and 100+ application estates
• Familiarity with MFA migrations and regulatory environments
• Excellent client-facing communication and stakeholder presentation skills

Responsabilidades

• Lead end-to-end migration architecture design for CyberArk estates
• Define staged-ingestion and risk-managed cutover processes
• Own name-collision resolution and policy reconciliation between source and target
• Produce migration runbooks, RAID logs, and effort sizing across Safes, Accounts, Platforms, and Policies
• Design federation from PVWA to Entra ID via SAML/OIDC and plan MFA migration
• Define acceptance criteria and go/no-go gates for pilots and production waves
• Mentor CyberArk engineers and present designs to security and governance leads
• Ensure audit evidence meets TSA compliance requirements

Conhecimentos

Identity & Access Management

CyberArk PAM

PVWA / EPV / CPM

SAML / OIDC federation

MFA migration

Enterprise architecture

Client-facing communication

Ferramentas

CyberArk PAM

Entra ID

Okta

Descrição da oferta de emprego

Bounteous is seeking a CyberArk Architect in Newbury, UK to lead solution design for a large-scale Privileged Access Management migration and merger consolidation programme. The role spans vault migration design, identity federation, and onboarding strategy for thousands of accounts and 250+ applications, under a strict regulatory deadline.

The candidate will own architecture decisions, drive technical direction, and mentor engineers while ensuring audit evidence supports TSA compliance and