CyberArk Architect -10860641

ITProposal; Amsterdam; On-site; EUR 90,000 - 140,000; Full time

Job summary

ITProposal seeks an experienced CyberArk Architect to design, implement, and support enterprise PAM solutions. You will lead cybersecurity architecture, governance, and integration with Active Directory, cloud platforms, and ITSM systems. Strong automation skills and technical mentoring are essential.

Join a hybrid Amsterdam team for a six-month engagement starting October 2026, delivering secure PAM deployments, credential governance, and ongoing improvements with cross-functional collaboration.

Qualifications

• Proven 6–8 years in PAM/CyberArk environments.
• Strong scripting and automation capabilities.
• Experience in identity security and cloud integrations.

Responsibilities

• Design and implement enterprise CyberArk PAM architectures.
• Define PAM strategy, standards, and implementation roadmap.
• Lead deployment, configuration, and upgrades of CyberArk components.
• Configure Safes, Platforms, Account Groups, and privileged credentials.
• Implement password rotation and credential lifecycle governance.
• Integrate CyberArk with identity, ITSM, cloud, and security tools.

Skills

CyberArk PAM Expertise

Automation & Scripting

Zero Trust

Security Architecture

Tools

Digital Vault

PSM

CPM

PVWA

PTA

CyberArk Identity

Conjur

Job description

CyberArk Architect (PAM Consultant)

Location: Amsterdam, Netherlands (Hybrid)
Contract Duration: 6 Months
Start Date: October 2026
Experience Required: 6–8 Years

Job Overview

We are seeking an experienced CyberArk Architect to design, implement, and support enterprise-wide Privileged Access Management (PAM) solutions. The ideal candidate will have strong expertise in CyberArk architecture, privileged account governance, identity security, secrets management, and integration with enterprise systems.

Key Responsibilities

• Design and develop secure, scalable, and highly available CyberArk PAM architectures.
• Define PAM strategy, architecture standards, best practices, and implementation roadmap.
• Lead the deployment, configuration, and upgrade of CyberArk components.
• Configure and manage Safes, Platforms, Account Groups, access controls, and privileged credentials.
• Implement password rotation and privileged credential lifecycle management.
• Integrate CyberArk with enterprise identity, cloud, ITSM, and security platforms.
• Develop automation using REST APIs, PowerShell, Python, and Ansible.
• Implement application credential and secrets management solutions.
• Conduct security assessments and recommend PAM improvements.
• Support governance, compliance, and privileged access audits.
• Provide Level 3 support, troubleshooting, and root cause analysis for CyberArk environments.
• Create technical documentation, operational procedures, and mentor junior PAM engineers.

Required Skills & Experience

• 6–8 years of experience in CyberArk Privileged Access Management.
• Strong hands-on experience designing and implementing enterprise CyberArk solutions.
• Expertise with:
  • Digital Vault
  • Privileged Session Manager (PSM)
  • Central Policy Manager (CPM)
  • Password Vault Web Access (PVWA)
  • Privileged Threat Analytics (PTA)
  • CyberArk Identity
  • Conjur Secrets Management
• Experience integrating CyberArk with:
  • Active Directory
  • Microsoft Entra ID (Azure AD)
  • LDAP
  • SIEM platforms
  • IT Service Management tools
  • Cloud platforms (AWS, Azure, or GCP)
• Strong scripting and automation skills using PowerShell, Python, REST APIs, or Ansible.
• Experience implementing secrets management and privileged credential governance.
• Strong understanding of Zero Trust and least-privilege security principles.
• Experience supporting compliance frameworks such as ISO 27001, NIST, SOC 2, PCI-DSS, or CIS Controls.
• Excellent analytical, troubleshooting, communication, and documentation skills.

Preferred Qualifications

• CyberArk certifications are an advantage.
• Experience with enterprise identity security and cloud-native PAM environments.
• Ability to lead technical discussions and mentor security engineering teams.