cyberark Architect

Tata Consultancy Services; Bengaluru; On-site; INR 3,500,000 - 6,000,000; Full time

Job summary

Tata Consultancy Services in Bengaluru is seeking an experienced CyberArk PAM Architect to design and implement end-to-end PAM solutions across on-prem, cloud, and hybrid environments.

You will drive reference architectures, HA/DR strategies, and Zero Trust alignment while leading Privilege Cloud and self-hosted deployments and integration with enterprise systems.

Qualifications

• Experience with CyberArk PAM components Vault, PVWA, CPM, PSM.
• Minimum 5 years in architecture and design of security solutions.
• Experience integrating Entra ID/AD with ServiceNow.
• Automation using PowerShell and Python.
• Strong knowledge of HA/DR and Zero Trust concepts.
• Proficient L3/L4 troubleshooting and incident handling.

Responsibilities

• Design end-to-end CyberArk PAM architecture for on-prem, hybrid, and cloud.
• Define reference architecture, HA/DR strategy, and security standards.
• Lead CyberArk Privilege Cloud and Self-Hosted deployments.
• Develop PAM roadmaps aligned with Zero Trust and enterprise security.
• Architect and implement PVWA, PSM/PSMP, AAM, and EPM.
• Lead migrations, upgrades, and transformation initiatives.
• Integrate CyberArk with SailPoint, Okta, ServiceNow, MFA.
• Develop automation via REST APIs and scripting; remove hard-coded creds.
• Enforce least privilege and access governance; support audits.

Skills

CyberArk PAM

Architecture & Design

Entra ID/AD integration

ServiceNow integration

PowerShell

Python automation

HA/DR design

Zero Trust design

Troubleshooting

Education

Architecture & design experience (5+ years)

Tools

PVWA

PSM/PSMP

AAM/Secrets Manager

EPM

Job description

CyberArk, CyberArk Valut, PVWA, CPM, PSM/PSMP, AAM/Conjour, Privilige cloud, Session Recording, Safe Management, PAM, Zero Trust Security

Desired Experience Range**

7 to 10

Location of Requirement

Desired Competencies (Technical/Behavioral Competency)

Must-Have**

• CyberArk PAM (Vault, PVWA, CPM, PSM)
• Architecture & Design Experience (5+ years)
• Entra ID/AD + ServiceNow Integration
• PowerShell/Python Automation
• HA/DR & Zero Trust Design
• L3/L4 Troubleshooting Experience

Good-to-Have

• CyberArk Endpoint Privilege Manager (EPM)
• CyberArk Secure Web Sessions
• Privilege Cloud Shared Services Architecture
• CyberArk Disaster Recovery Automation
• CyberArk SaaS Migration Experience

Responsibility of / Expectations from the Role

1

• Design end-to-end CyberArk PAM architecture for on-premises, hybrid, and cloud environments.
• Define CyberArk reference architecture, HA/DR strategy, and security standards.
• Lead CyberArk Privilege Cloud and Self-Hosted deployments.
• Develop PAM roadmaps aligned with Zero Trust and enterprise security strategies.

2 CyberArk Implementation

• Architect and implement:
• Password Vault Web Access (PVWA)
• Privileged Session Manager (PSM/PSMP)
• Application Access Manager (AAM/Secrets Manager)
• Endpoint Privilege Manager (EPM)
• Lead migration, upgrade, and transformation initiatives

3 Integration & Automation

• Integrate CyberArk with:
• SailPoint, Saviynt, Okta, ForgeRock
• MFA Solutions
• ServiceNow
• SSO and PKI solutions
• Develop automation using REST APIs, PowerShell, Python, and scripting frameworks.
• Eliminate hard-coded credentials through secrets management.

4 Security & Governance

• Implement Least Privilege and Zero Trust security models.
• Define safe structures, RBAC models, approval workflows, and access governance.
• Support audits, compliance reporting, and regulatory requirements

5 Operations & Leadership

• Troubleshoot complex CyberArk platform issues.
• Mentor engineering teams and guide stakeholders on PAM best practices.
• Lead solution reviews, technical governance, and architecture approvals.