PAM Solution Architect

emagine; Polska; Remote; PLN 180,000 - 240,000; Full time

Job summary

emagine is seeking a highly experienced PAM/CyberArk Solution Architect to design and implement a comprehensive CyberArk SaaS architecture for privileged access management. This role includes migration strategy, risk assessment, and defining secure access controls that meet operating requirements.

You will map safes, accounts and permissions to the target state, define identity, MFA and RBAC models, and integrate with AD/Entra ID, SIEM, ITSM and monitoring tools.

Qualifications

• Proven experience as a PAM/CyberArk Solution Architect.
• Hands-on CyberArk on-premises and SaaS implementations.
• Experience migrating from on-premises to SaaS.
• Strong IAM, privileged access, SSO, MFA, and RBAC knowledge.

Responsibilities

• Define the CyberArk SaaS target architecture.
• Design the migration approach, including pilot, waves, cutover, and rollback.
• Map safes, accounts, permissions, platforms, and policies to the target state.
• Define identity, authentication, MFA, and access control model.
• Design required integrations with AD/Entra ID, SIEM, ITSM, and monitoring tools.
• Identify technical, security, and operational migration risks.
• Guide implementation teams during configuration, migration, and testing.
• Define and support test scenarios for access, password rotation, session recording, and logging.
• Prepare architecture, migration, operational, and handover documentation.

Skills

PAM Solutions Architecture

CyberArk

IAM / Privileged Access

Tools

CyberArk on-premises

CyberArk SaaS

Job description

Summary

The primary objective of this role is to design and implement a comprehensive CyberArk SaaS architecture for privileged access management (PAM). This includes defining migration strategies and ensuring secure access solutions that comply with operational requirements.

Main Responsibilities

• Define the CyberArk SaaS target architecture.


• Design the migration approach, including pilot, waves, cutover, and rollback.


• Map safes, accounts, permissions, platforms, and policies to the target state.


• Define identity, authentication, MFA, and access control model.


• Design required integrations with AD/Entra ID, SIEM, ITSM, and monitoring tools.


• Identify technical, security, and operational migration risks.


• Guide implementation teams during configuration, migration, and testing.


• Define and support test scenarios for access, password rotation, session recording, and logging.


• Prepare architecture, migration, operational, and handover documentation.

Key Requirements

• Proven experience as a PAM/CyberArk Solution Architect.


• Hands‑on experience with CyberArk on‑premises and SaaS solutions.


• Experience with CyberArk migration projects, preferably from on‑premises to SaaS.


• Strong understanding of IAM, privileged access, SSO, MFA, and RBAC.


• Experience with enterprise infrastructure, networking, and hybrid environments.


• Knowledge of security, audit, and compliance requirements for privileged access.

Nice to Have

• Ability to work effectively with security, infrastructure, operations, applications, and vendor teams.


• Relevant CyberArk certifications preferred: Defender, Sentry, or Guardian.

Other Details

• Location: Remote


• Years of experience: +10 Years


• Preferred start date/end date: ASAP – 31.12.2027