CyberArk System Architect

Luxoft; Bengaluru; On-site; INR 4,000,000 - 6,000,000; Full time

Job summary

Luxoft in Bengaluru seeks an experienced CyberArk System Architect with 10+ years designing, upgrading, and migrating CyberArk environments, on-prem and cloud.

You will lead vault topology, DR, multi-site deployments, and large migrations, plus OS upgrades across Windows and Linux, with strong troubleshooting and cross-domain collaboration.

The role requires hands-on expertise, mentoring teams, and defining PAM standards for secure, scalable enterprise deployments.

Qualifications

• 10+ years hands-on experience with CyberArk PAS
• CyberArk certifications (CDE)
• Strong expertise in Vault architecture & migrations
• PVWA, CPM, PSM, PSMP install/upgrade
• OS upgrades and secure hardening
• Windows and Linux, networking, AD, DNS, load balancers, firewalls
• SSL/TLS certificate configuration and lifecycle management
• Designing, documenting, and executing PAM standards
• Experience with cloud environments (AWS, Azure, GCP)
• Scripting/automation knowledge is a plus

Responsibilities

• CyberArk Architecture/Design & Migration/Upgrade Implementation
• Design scalable, secure, HA enterprise architectures
• Lead Vault topology, DR, and multi-site deployments
• Execute large-scale CyberArk migrations and account onboarding
• Perform OS-level upgrades across Windows/Linux
• Lead new environment setup and secure hardening
• Mentor engineering teams during upgrades/outages
• Collaborate with security, infra, and apps teams

Skills

CyberArk Vault architecture

CyberArk migrations

PVWA/CPM/PSM/PSMP

OS upgrades

Windows/Linux

Networking/AD/DNS

SSL/TLS certs

Troubleshooting

PAM architecture standards

Cloud environments (AWS/Azure/GCP)

Job description

Project Description:

We are looking for an experienced CyberArk System Architect with over 10 years of hands on expertise in architecting, upgrading, and migrating CyberArk environments. The ideal candidate will be highly proficient in CyberArk OnPrem & Cloud with significant experience performing major platform upgrades, Vault migrations, OS upgrades, and multi environment deployments.

The candidate must also possess strong infrastructure troubleshooting skills, excellent understanding of enterprise systems, and the ability to diagnose and resolve complex infra issues quickly and effectively.

Responsibilities:

CyberArk Architecture/Design & Migration/Upgrade Implementation

• Design scalable, secure, and high availability CyberArk enterprise architectures.
• Develop architecture blueprints, technical specifications, and standard deployment patterns.
• Lead end to end design for Vault topology, disaster recovery, and multi site deployments.
• Execute large-scale CyberArk migrations including account onboarding, credential moves, and system consolidation.
• Perform Vault upgrades, component upgrades (PVWA, CPM, PSM, PSMP), and OS-level upgrades across Windows/Linux servers.
• Lead new environment setup, secure hardening, and component integration in enterprise ecosystems.

Infrastructure Expertise & Issue Resolution

• Quickly diagnose and fix complex infra issues including OS, networking, firewall, DNS, certificates, and connectivity problems.
• Work directly with infrastructure teams (Windows, Linux, Network, AD, Cloud) to resolve cross-domain issues.
• Perform root cause analysis and provide long-term solutions to improve stability and performance.

CyberArk Operations & Optimization

• Establish platform governance, operational best practices, and lifecycle management processes.
• Optimize platforms for performance, scalability, and compliance requirements.
• Design safe structures, onboarding workflows, and secure access models.

Technical Leadership

• Act as the CyberArk SME for all architecture, migration, and infra troubleshooting activities.
• Mentor engineering teams and provide technical guidance during critical upgrades or outages.
• Collaborate with security, infra, and application teams to ensure seamless CyberArk adoption.

Mandatory Skills Description:

• 10+ years of hands on experience with CyberArk PAS.
• CyberArk certifications (CDE.).
• Strong expertise in:
• o CyberArk Vault architecture & migrations
• o PVWA, CPM, PSM, PSMP installation and upgrades
• o Component OS upgrades and secure hardening
• Deep understanding of Windows, Linux, networking, AD, DNS, load balancers, firewalls.
• Strong troubleshooting skills with the ability to resolve infrastructure and platform-level issues rapidly.
• Hands-on experience in SSL/TLS certificate configuration and lifecycle management.
• Experience in designing, documenting, and executing PAM architectural standards.

Nice-to-Have Skills Description:

• Experience in cloud environments (AWS, Azure, GCP).
• Knowledge of scripting/automation (PowerShell, Python).
• Exposure to DevOps pipelines and secrets management.