CyberArk System Architect [PAS/CDE/Cloud]

Luxoft India; Bengaluru; On-site; INR 4,000,000 - 7,000,000; Full time

Job summary

Luxoft India seeks an experienced CyberArk System Architect with 10+ years of hands-on expertise in designing, upgrading, and migrating CyberArk environments across on-prem and cloud. You will lead Vault topology, DR planning, and multi-site deployments while coordinating with Windows, Linux, Network, AD, and Cloud teams to resolve complex infra issues.

The role involves material upgrades to PVWA, CPM, PSM, PSMP, OS hardening, and secure access modelling, with a focus on scalable, compliant

Qualifications

• 10+ years of hands on experience with CyberArk PAS.
• CyberArk certifications (CDE.).

Responsibilities

• Design scalable, secure, and high availability CyberArk enterprise architectures.
• Lead end to end design for Vault topology, disaster recovery, and multi site deployments.
• Perform Vault upgrades, component upgrades (PVWA, CPM, PSM, PSMP), and OS-level upgrades across Windows/Linux servers.
• Lead new environment setup, secure hardening, and component integration in enterprise ecosystems.
• Quickly diagnose and fix complex infra issues including OS, networking, firewall, DNS, certificates, and connectivity problems.
• Work directly with infrastructure teams (Windows, Linux, Network, AD, Cloud) to resolve cross-domain issues.
• Perform root cause analysis and provide long-term solutions to improve stability and performance.

Skills

CyberArk PAS

Vault architecture

Migrations

PVWA

CPM

PSM

PSMP

OS hardening

Windows

Linux

Networking

AD

DNS

Firewalls

TLS certificates

Troubleshooting

Scripting

Education

CyberArk certifications (CDE.)

Tools

PVWA

CPM

PSM

PSMP

Job description

• We are looking for an experienced CyberArk System Architect with over 10 years of hands on expertise in architecting, upgrading, and migrating CyberArk environments. The ideal candidate will be highly proficient in CyberArk OnPrem & Cloud with significant experience performing major platform upgrades, Vault migrations, OS upgrades, and multi environment deployments.
• The candidate must also possess strong infrastructure troubleshooting skills, excellent understanding of enterprise systems, and the ability to diagnose and resolve complex infra issues quickly and effectively.

Responsibilities:

• Design scalable, secure, and high availability CyberArk enterprise architectures.
• Develop architecture blueprints, technical specifications, and standard deployment patterns.
• Lead end to end design for Vault topology, disaster recovery, and multi site deployments.
• Execute large-scale CyberArk migrations including account onboarding, credential moves, and system consolidation.
• Perform Vault upgrades, component upgrades (PVWA, CPM, PSM, PSMP), and OS-level upgrades across Windows/Linux servers.
• Lead new environment setup, secure hardening, and component integration in enterprise ecosystems.
• Quickly diagnose and fix complex infra issues including OS, networking, firewall, DNS, certificates, and connectivity problems.
• Work directly with infrastructure teams (Windows, Linux, Network, AD, Cloud) to resolve cross-domain issues.
• Perform root cause analysis and provide long-term solutions to improve stability and performance.

CyberArk Operations & Optimization

• Establish platform governance, operational best practices, and lifecycle management processes.
• Optimize platforms for performance, scalability, and compliance requirements.
• Design safe structures, onboarding workflows, and secure access models.
• Technical Leadership
• Act as the CyberArk SME for all architecture, migration, and infra troubleshooting activities.
• Mentor engineering teams and provide technical guidance during critical upgrades or outages.
• Collaborate with security, infra, and application teams to ensure seamless CyberArk adoption.

Mandatory Skills Description:

• 10+ years of hands on experience with CyberArk PAS.
• CyberArk certifications (CDE.).

Strong expertise in:

• CyberArk Vault architecture & migrations
• PVWA, CPM, PSM, PSMP installation and upgrades
• Component OS upgrades and secure hardening
• Deep understanding of Windows, Linux, networking, AD, DNS, load balancers, firewalls.
• Strong troubleshooting skills with the ability to resolve infrastructure and platform-level issues rapidly.
• Hands-on experience in SSL/TLS certificate configuration and lifecycle management.
• Experience in designing, documenting, and executing PAM architectural standards.

Nice-to-Have Skills Description:

• Experience in cloud environments (AWS, Azure, GCP).
• Knowledge of scripting/automation (PowerShell, Python).
• Exposure to DevOps pipelines and secrets management.