Cyberark Architect

Tata Consultancy Services; Hyderabad; On-site; INR 2,000,000 - 3,200,000; Full time

Job summary

Tata Consultancy Services (TCS) is seeking an experienced CyberArk Architect to design and lead PAM solutions across on-prem, hybrid, and cloud environments in India. You will own architecture, reference designs, deployments, integrations with AD, SIEM, IAM tools, and governance processes while mentoring teams and guiding stakeholders on best practices.

Location options include Kolkata, HYD, and Bangalore, with on-site work and collaboration across global teams to deliver secure privileged

Qualifications

• 7–10 years of hands-on CyberArk experience.
• Design end-to-end PAM architectures.
• Lead deployments and migrations.
• Integrate with AD, SIEM, and IAM solutions.
• Establish governance and security standards.

Responsibilities

• Design end-to-end CyberArk PAM architecture for on-prem, hybrid, and cloud.
• Lead CyberArk deployment, migration, and upgrades.
• Integrate PAM with AD, SailPoint/Okta, SIEM, and MFA.
• Define RBAC, JIT access, and Zero Trust policies.
• Provide L3/L4 support and mentor teams.

Skills

CyberArk

PAM

Architecture design

Leadership

Tools

PVWA

CPM

PSM

AAM

EPM

Job description

Greetings from TCS!!!

Role: CyberArk Architect

Experience: 7 to 10 years

Location: Kolkata/HYD/Bangalore

Job Description:

Architecture & Design

• Design end-to-end CyberArk PAM architecture for on-premises, hybrid, and cloud environments.
• Define CyberArk reference architecture, HA/DR strategy, and security standards.
• Lead CyberArk Privilege Cloud and Self-Hosted deployments.
• Develop PAM roadmaps aligned with Zero Trust and enterprise security strategies.

CyberArk Implementation

• Architect and implement:
• Enterprise Password Vault (EPV)
• Password Vault Web Access (PVWA)
• Central Policy Manager (CPM)
• Privileged Session Manager (PSM/PSMP)
• Application Access Manager (AAM/Secrets Manager)
• Privilege Cloud
• Endpoint Privilege Manager (EPM)
• Lead migration, upgrade, and transformation initiatives

Integration & Automation

• Integrate CyberArk with:
• Microsoft Entra ID / Active Directory
• SailPoint, Saviynt, Okta, ForgeRock
• MFA Solutions
• ServiceNow
• Microsoft Sentinel / SIEM platforms
• SSO and PKI solutions
• Develop automation using REST APIs, PowerShell, Python, and scripting frameworks.
• Eliminate hard-coded credentials through secrets management.

Security & Governance

• Design Just-In-Time (JIT) access controls.
• Implement Least Privilege and Zero Trust security models.
• Define safe structures, RBAC models, approval workflows, and access governance.
• Support audits, compliance reporting, and regulatory requirements

Operations & Leadership

• Provide L3/L4 escalation support.
• Troubleshoot complex CyberArk platform issues.
• Mentor engineering teams and guide stakeholders on PAM best practices.
• Lead solution reviews, technical governance, and architecture approvals.