CyberArk Architect

Sutherland Global; Hyderabad; On-site; INR 1,800,000 - 2,400,000; Full time

Job summary

Sutherland Digital Services is seeking a Senior CyberArk Engineer to join a high-velocity security program for a U.S. client.

You will design CyberArk solutions for privileged access, onboard applications and infrastructure, and lead end-to-end implementation with strong focus on security and compliance. Collaborate with security, IT, and business teams, prepare high-quality design documents, runbooks, and handover materials, and ensure adherence to enterprise standards.

Qualifications

• Hands-on CyberArk PAM experience and implementation
• Experience onboarding privileged accounts, services, databases, and enterprise apps
• Knowledge of CyberArk components and integrations (Digital Vault, PVWA, CPM, PSM, PTA)
• Strong IAM/PAM concepts and security architecture understanding
• Effective cross-functional collaboration and communication with stakeholders

Responsibilities

• Assess the privileged access landscape and onboarding readiness
• Design CyberArk solutions for applications, servers, databases, service accounts, and platforms
• Lead end-to-end CyberArk implementation, configuration, hardening, and integration
• Onboard applications and infrastructure into CyberArk, including vaulting, rotation, session controls
• Define onboarding patterns and runbooks; prepare design documents and SOPs
• Collaborate with teams to gather requirements and drive delivery
• Conduct workshops, reviews, and architecture presentations for stakeholders
• Ensure alignment with security standards and compliance practices

Skills

Communication skills

Stakeholder management

Technical presentations

Documentation

Team collaboration

Education

Bachelor's degree

Tools

CyberArk PAM

Digital Vault

PVWA

CPM

PSM

PTA

Job description

Company Description:

Sutherland Digital Services is hiring Senior Java Engineers to join a high-velocity platform modernization program for a top-tier U.S. telecommunications client. In this role, you will design and build production-grade Spring Boot microservices, enhance legacy Java services to modern Spring 6.1 standards, and deliver consistently within a structured, wave-based delivery model. You will work under the direction of an offshore Java Tech Lead, follow contract-first API development practices, and hold yourself to a high standard of test coverage and code quality. If you thrive in fast-paced, delivery-focused environments and have strong Spring Boot fundamentals, this is a role where your work ships to production on a defined schedule.

Job Description:

Key Responsibilities

• Assess the current privileged access landscape, application architecture, onboarding readiness, and integration dependencies.
• Design CyberArk solutions for applications, servers, databases, service accounts, and enterprise platforms.
• Lead end-to-end CyberArk implementation, configuration, hardening, and integration activities.
• Onboard applications and infrastructure into CyberArk, including vaulting, credential rotation, session management, and privileged session controls.
• Define onboarding patterns, standards, runbooks, and best practices for different application and platform types.
• Collaborate with infrastructure, security, application, and business teams to gather requirements and drive delivery.
• Conduct design workshops, technical reviews, and architecture presentations for internal and external stakeholders.
• Prepare high-quality HLDs, LLDs, SOPs, operational handover documents, and implementation documentation.
• Troubleshoot onboarding and integration issues and provide practical remediation guidance.

Ensure the overall solution aligns with enterprise security standards, compliance obligations, and operational best practices.

Qualifications:

Qualifications

• Strong hands-on experience with CyberArk PAM solutions.
• Proven experience in CyberArk assessment, architecture, design, implementation, and application onboarding.
• Experience onboarding privileged accounts, service accounts, APIs, databases, Windows/Linux platforms, and enterprise applications.
• Working knowledge of key CyberArk components such as Digital Vault, PVWA, CPM, PSM, PTA and related integrations.
• Strong understanding of privileged credential management, password rotation, session isolation, and session recording.
• Good knowledge of IAM/PAM concepts, security controls, and enterprise security architecture.
• Experience working with cross-functional teams in complex enterprise environments.

Mandatory Requirements

• Travel readiness is mandatory.
• A valid passport is mandatory.
• Excellent communication, presentation, and documentation skills.
• Strong stakeholder management and client-facing communication capability.

Preferred Qualifications

• Experience in large-scale CyberArk onboarding and transformation programmes.
• Exposure to cloud and hybrid environments.
• Knowledge of integrations with Entra ID, Active Directory, cloud platforms, and enterprise applications.
• Relevant CyberArk certifications are preferred.

Additional Information:

All your information will be kept confidential according to EEO guidelines.