Cyberark Architect

Tata Consultancy Services; Hyderabad; On-site; INR 3,500,000 - 6,000,000; Full time

Job summary

Tata Consultancy Services in Hyderabad seeks a senior CyberArk expert to design end-to-end PAM architecture for on-prem, hybrid, and cloud environments.

You will define reference architecture, HA/DR, and security standards, lead Privilege Cloud and Self-Hosted deployments, and develop roadmaps aligned with Zero Trust.

You will integrate with SailPoint, Okta, ServiceNow, MFA, and PKI, automate with REST APIs, PowerShell, Python, and mentor engineering teams.

Qualifications

• Experience designing end-to-end CyberArk architectures for complex environments.
• Proficient in implementing PVWA, PSM/PSMP, AAM, and EPM components.
• Strong ability to integrate CyberArk with IAM/SaaS tools & platforms.
• Knowledge of security governance, RBAC, and Zero Trust.
• Experience mentoring engineering teams and leading architecture reviews.

Responsibilities

• Design end-to-end CyberArk PAM architecture for on-premises, hybrid, and cloud environments.
• Define CyberArk reference architecture, HA/DR strategy, and security standards.
• Lead CyberArk Privilege Cloud and Self-Hosted deployments.
• Develop PAM roadmaps aligned with Zero Trust and enterprise security strategies.
• Architect and implement PVWA, PSM, AAM, and EPM.
• Lead migration, upgrade, and transformation initiatives.
• Integrate CyberArk with SailPoint, Saviynt, Okta, ForgeRock, MFA solutions, ServiceNow, SSO and PKI.
• Develop automation using REST APIs, PowerShell, Python, and scripting frameworks.
• Eliminate hard-coded credentials through secrets management.
• Mentor engineering teams and guide stakeholders on PAM best practices.
• Lead solution reviews, technical governance, and architecture approvals.

Skills

CyberArk

PAM architecture

Scripting

Tools

PVWA

PSM/PSMP

AAM/Secrets Manager

EPM

Job description

• Design end-to-end CyberArk PAM architecture for on-premises, hybrid, and cloud environments.
• Define CyberArk reference architecture, HA/DR strategy, and security standards.
• Lead CyberArk Privilege Cloud and Self-Hosted deployments.
• Develop PAM roadmaps aligned with Zero Trust and enterprise security strategies.

CyberArk Implementation

• Architect and implement:
• Password Vault Web Access (PVWA)
• Privileged Session Manager (PSM/PSMP)
• Application Access Manager (AAM/Secrets Manager)
• Endpoint Privilege Manager (EPM)
• Lead migration, upgrade, and transformation initiatives

Integration & Automation

• Integrate CyberArk with:
• SailPoint, Saviynt, Okta, ForgeRock
• MFA Solutions
• ServiceNow
• SSO and PKI solutions
• Develop automation using REST APIs, PowerShell, Python, and scripting frameworks.
• Eliminate hard-coded credentials through secrets management.

Security & Governance

• Implement Least Privilege and Zero Trust security models.
• Define safe structures, RBAC models, approval workflows, and access governance.
• Support audits, compliance reporting, and regulatory requirements

Operations & Leadership

• Troubleshoot complex CyberArk platform issues.
• Mentor engineering teams and guide stakeholders on PAM best practices.
• Lead solution reviews, technical governance, and architecture approvals.