CyberArk Architect

Sutherland; Hyderabad; On-site; INR 1,500,000 - 2,100,000; Full time

Job summary

Sutherland is seeking a CyberArk Architect/Engineer to lead enterprise privileged access initiatives. You will assess existing privileged access, design CyberArk solutions for applications, servers, databases, and service accounts, and lead end-to-end onboarding and integration.

You will define onboarding standards, runbooks, and best practices, collaborate with infrastructure, security, and business teams, and prepare design docs and handover materials for stakeholders worldwide.

Qualifications

• Strong hands-on experience with CyberArk PAM solutions.
• Proven experience in CyberArk assessment, architecture, design, implementation, and application onboarding.
• Experience onboarding privileged accounts, service accounts, APIs, databases, Windows/Linux platforms, and enterprise applications.
• Working knowledge of CyberArk components such as Digital Vault, PVWA, CPM, PSM, PTA and related integrations.
• Strong understanding of privileged credential management, password rotation, session isolation, and session recording.
• Good knowledge of IAM/PAM concepts, security controls, and enterprise security architecture.
• Experience working with cross-functional teams in complex enterprise environments.

Responsibilities

• Assess the current privileged access landscape, application architecture, onboarding readiness, and integration dependencies.
• Design CyberArk solutions for applications, servers, databases, service accounts, and enterprise platforms.
• Lead end-to-end CyberArk implementation, configuration, hardening, and integration activities.
• Onboard applications and infrastructure into CyberArk, including vaulting, credential rotation, session management, and privileged session controls.
• Define onboarding patterns, standards, runbooks, and best practices for different application and platform types.
• Collaborate with infrastructure, security, application, and business teams to gather requirements and drive delivery.
• Conduct design workshops, technical reviews, and architecture presentations for internal and external stakeholders.
• Prepare high-quality HLDs, LLDs, SOPs, operational handover documents, and implementation documentation.
• Troubleshoot onboarding and integration issues and provide practical remediation guidance.
• Ensure the overall solution aligns with enterprise security standards, compliance obligations, and operational best practices.

Skills

CyberArk PAM

CyberArk assessment

CyberArk architecture

Application onboarding

PVWA/CPM/PSM/PTA

Privileged credential management

Cross-functional collaboration

Tools

Digital Vault

PVWA

CPM

PSM

PTA

Job description

• Assess the current privileged access landscape, application architecture, onboarding readiness, and integration dependencies.
• Design CyberArk solutions for applications, servers, databases, service accounts, and enterprise platforms.
• Lead end-to-end CyberArk implementation, configuration, hardening, and integration activities.
• Onboard applications and infrastructure into CyberArk, including vaulting, credential rotation, session management, and privileged session controls.
• Define onboarding patterns, standards, runbooks, and best practices for different application and platform types.
• Collaborate with infrastructure, security, application, and business teams to gather requirements and drive delivery.
• Conduct design workshops, technical reviews, and architecture presentations for internal and external stakeholders.
• Prepare high-quality HLDs, LLDs, SOPs, operational handover documents, and implementation documentation.
• Troubleshoot onboarding and integration issues and provide practical remediation guidance.

Ensure the overall solution aligns with enterprise security standards, compliance obligations, and operational best practices.

Qualifications

• Strong hands-on experience with CyberArk PAM solutions.
• Proven experience in CyberArk assessment, architecture, design, implementation, and application onboarding.
• Experience onboarding privileged accounts, service accounts, APIs, databases, Windows/Linux platforms, and enterprise applications.
• Working knowledge of key CyberArk components such as Digital Vault, PVWA, CPM, PSM, PTA and related integrations.
• Strong understanding of privileged credential management, password rotation, session isolation, and session recording.
• Good knowledge of IAM/PAM concepts, security controls, and enterprise security architecture.
• Experience working with cross-functional teams in complex enterprise environments.

Mandatory Requirements

• Travel readiness is mandatory.
• A valid passport is mandatory.
• Excellent communication, presentation, and documentation skills.
• Strong stakeholder management and client-facing communication capability.

Preferred Qualifications

• Experience in large-scale CyberArk onboarding and transformation programmers.
• Exposure to cloud and hybrid environments.
• Knowledge of integrations with Entra ID, Active Directory, cloud platforms, and enterprise applications.
• Relevant CyberArk certifications are preferred.