CyberArk Technical Architect

Tata Consultancy Services; Bengaluru; On-site; INR 2,500,000 - 4,500,000; Full time

Job summary

CyberArk in Bengaluru is seeking an experienced CyberArk Architect to design and implement PAM across on-prem, hybrid, and cloud environments. You will lead deployments of PVWA, PSM/PSMP, AAM, and EPM while aligning roadmaps with Zero Trust principles.

You will mentor engineering teams and collaborate with security stakeholders to ensure compliant, scalable PAM solutions with robust automation and integration capabilities.

Qualifications

• CyberArk PAM architecture design in on-prem, hybrid and cloud.
• 5+ years experience in architecture & design.
• Integration of Entra ID/AD with ServiceNow.
• Automation using PowerShell or Python.
• HA/DR design and Zero Trust concepts.

Responsibilities

• Design end-to-end CyberArk PAM architecture for on-premises, hybrid, and cloud environments.
• Define CyberArk reference architecture, HA/DR strategy, and security standards.
• Lead CyberArk Privilege Cloud and Self-Hosted deployments.
• Develop PAM roadmaps aligned with Zero Trust and enterprise security strategies.
• Lead migration, upgrade, and transformation initiatives in CyberArk implementations.

Skills

CyberArk PAM (Vault PVWA CPM PSM)

Architecture & Design Experience

Entra ID/AD + ServiceNow Integration

PowerShell/Python Automation

HA/DR & Zero Trust Design

L3/L4 Troubleshooting Experience

Tools

SailPoint

Saviynt

Okta

ForgeRock

MFA Solutions

ServiceNow

SSO

PKI Solutions

Job description

CyberArk, CyberArk Valut, PVWA, CPM, PSM/PSMP, AAM/Conjour, Privilige cloud, Session Recording, Safe Management, PAM, Zero Trust Security

Desired Experience Range**

7 to 10

Location of Requirement

Desired Competencies (Technical/Behavioral Competency)

Must-Have**

• CyberArk PAM (Vault, PVWA, CPM, PSM)
• Architecture & Design Experience (5+ years)
• Entra ID/AD + ServiceNow Integration
• PowerShell/Python Automation
• HA/DR & Zero Trust Design
• L3/L4 Troubleshooting Experience

Good-to-Have

• CyberArk Endpoint Privilege Manager (EPM)
• CyberArk Secure Web Sessions
• Privilege Cloud Shared Services Architecture
• CyberArk Disaster Recovery Automation
• CyberArk SaaS Migration Experience

Responsibility of / Expectations from the Role

1

• Design end-to-end CyberArk PAM architecture for on-premises, hybrid, and cloud environments.
• Define CyberArk reference architecture, HA/DR strategy, and security standards.
• Lead CyberArk Privilege Cloud and Self-Hosted deployments.
• Develop PAM roadmaps aligned with Zero Trust and enterprise security strategies.

2

CyberArk Implementation

• Architect and implement:
• Password Vault Web Access (PVWA)
• Privileged Session Manager (PSM/PSMP)
• Application Access Manager (AAM/Secrets Manager)
• Endpoint Privilege Manager (EPM)
• Lead migration, upgrade, and transformation initiatives

3

Integration & Automation

• Integrate CyberArk with:
• SailPoint, Saviynt, Okta, ForgeRock
• MFA Solutions
• ServiceNow
• SSO and PKI solutions
• Develop automation using REST APIs, PowerShell, Python, and scripting frameworks.
• Eliminate hard-coded credentials through secrets management.

4

Security & Governance

• Implement Least Privilege and Zero Trust security models.
• Define safe structures, RBAC models, approval workflows, and access governance.
• Support audits, compliance reporting, and regulatory requirements

5

Operations & Leadership

• Troubleshoot complex CyberArk platform issues.
• Mentor engineering teams and guide stakeholders on PAM best practices.
• Lead solution reviews, technical governance, and architecture approvals.