CyberArk PAM Architect – SaaS & Remote

emagine Polska; Województwo mazowieckie; Remote; PLN 180,000 - 240,000; Full time

Job summary

emagine Polska is seeking a Senior PAM/CyberArk Architect to design and implement a CyberArk SaaS architecture, including migration strategies and secure access controls that meet operational requirements.

You will define the target architecture, oversee migration waves, map safes and permissions, and collaborate with security, IT, and vendor teams. Remote work is offered; ASAP to 31.12.2027 start window.

Qualifications

• Proven experience as a PAM/CyberArk Solution Architect.
• Hands-on experience with CyberArk on-premises and SaaS solutions.
• Experience with CyberArk migration projects, preferably from on-premises to SaaS.
• Strong understanding of IAM, privileged access, SSO, MFA, and RBAC.

Responsibilities

• Define the CyberArk SaaS target architecture.
• Design the migration approach, including pilot, waves, cutover, and rollback.
• Map safes, accounts, permissions, platforms, and policies to the target state.
• Define identity, authentication, MFA, and access control model.
• Design required integrations with AD/Entra ID, SIEM, ITSM, and monitoring tools.
• Identify technical, security, and operational migration risks.Guide implementation teams during configuration, migration, and testing.
• Define and support test scenarios for access, password rotation, session recording, and logging.
• Prepare architecture, migration, operational, and handover documentation.

Skills

PAM/CyberArk Architect

CyberArk SaaS

IAM

RBAC

MFA

Hybrid environments

Security compliance

CyberArk migrations

SAML/SSO

Tools

CyberArk

Job description

emagine Polska is seeking a Senior PAM/CyberArk Architect to design and implement a CyberArk SaaS architecture, including migration strategies and secure access controls that meet operational requirements.

You will define the target architecture, oversee migration waves, map safes and permissions, and collaborate with security, IT, and vendor teams. Remote work is offered; ASAP to 31.12.2027 start window.