PAM System Architect

Luxoft; India; On-site; INR 3,500,000 - 5,200,000; Full time

Job summary

Luxoft is seeking an experienced CyberArk System Architect with 10+ years of hands-on expertise in architecting, upgrading, and migrating CyberArk environments. The candidate will work across on-prem and cloud deployments, including Vault topology, DR, and multi-site deployments.

The role requires strong infra troubleshooting, knowledge of Windows/Linux, networking, AD/DNS, and secure access models. Ideal candidates will lead large-scale migrations and provide technical guidance across teams.

Qualifications

• 10+ years hands-on CyberArk PAS experience.
• CyberArk certifications (CDE) preferred.
• Strong design, migration, and upgrade capabilities for on-premise and cloud deployments.

Responsibilities

• Lead CyberArk architecture, migration, and upgrade implementations.
• Design scalable, secure, HA CyberArk environments.

Skills

CyberArk PAS

Vault architecture

PVWA/CPM/PSM/PSMP

OS upgrades

Windows/Linux

Network/AD/DNS

TLS/SSL certs

PAM standards

Troubleshooting

Automation scripting

Job description

Project description

We are looking for an experienced CyberArk System Architect with over 10 years of hands on expertise in architecting, upgrading, and migrating CyberArk environments. The ideal candidate will be highly proficient in CyberArk OnPrem & Cloud with significant experience performing major platform upgrades, Vault migrations, OS upgrades, and multi environment deployments. The candidate must also possess strong infrastructure troubleshooting skills, excellent understanding of enterprise systems, and the ability to diagnose and resolve complex infra issues quickly and effectively.

Responsibilities

• CyberArk Architecture/Design & Migration/Upgrade Implementation


• Design scalable, secure, and high availability CyberArk enterprise architectures.


• Develop architecture blueprints, technical specifications, and standard deployment patterns.


• Lead end to end design for Vault topology, disaster recovery, and multi site deployments.


• Execute large-scale CyberArk migrations including account onboarding, credential moves, and system consolidation.


• Perform Vault upgrades, component upgrades (PVWA, CPM, PSM, PSMP), and OS-level upgrades across Windows/Linux servers.


• Lead new environment setup, secure hardening, and component integration in enterprise ecosystems.

Infrastructure Expertise & Issue Resolution

• Quickly diagnose and fix complex infra issues including OS, networking, firewall, DNS, certificates, and connectivity problems.


• Work directly with infrastructure teams (Windows, Linux, Network, AD, Cloud) to resolve cross-domain issues.


• Perform root cause analysis and provide long-term solutions to improve stability and performance.

CyberArk Operations & Optimization

• Establish platform governance, operational best practices, and lifecycle management processes.


• Optimize platforms for performance, scalability, and compliance requirements.


• Design safe structures, onboarding workflows, and secure access models.

Technical Leadership

• Act as the CyberArk SME for all architecture, migration, and infra troubleshooting activities.


• Mentor engineering teams and provide technical guidance during critical upgrades or outages.


• Collaborate with security, infra, and application teams to ensure seamless CyberArk adoption.

SKILLS

Must have

• 10+ years of hands on experience with CyberArk PAS.


• CyberArk certifications (CDE.).


• Strong expertise in:o CyberArk Vault architecture & migrationso PVWA, CPM, PSM, PSMP installation and upgradeso Component OS upgrades and secure hardening


• Deep understanding of Windows, Linux, networking, AD, DNS, load balancers, firewalls.


• Strong troubleshooting skills with the ability to resolve infrastructure and platform-level issues rapidly.


• Hands-on experience in SSL/TLS certificate configuration and lifecycle management.


• Experience in designing, documenting, and executing PAM architectural standards.

Nice to have

• Experience in cloud environments (AWS, Azure, GCP).


• Knowledge of scripting/automation (PowerShell, Python).


• Exposure to DevOps pipelines and secrets management.