PAM Solution Architect

emagine Polska; Województwo mazowieckie; Remote; PLN 180,000 - 240,000; Full time

Job summary

emagine Polska is seeking a Senior PAM/CyberArk Architect to design and implement a CyberArk SaaS architecture, including migration strategies and secure access controls that meet operational requirements.

You will define the target architecture, oversee migration waves, map safes and permissions, and collaborate with security, IT, and vendor teams. Remote work is offered; ASAP to 31.12.2027 start window.

Qualifications

• Proven experience as a PAM/CyberArk Solution Architect.
• Hands-on experience with CyberArk on-premises and SaaS solutions.
• Experience with CyberArk migration projects, preferably from on-premises to SaaS.
• Strong understanding of IAM, privileged access, SSO, MFA, and RBAC.

Responsibilities

• Define the CyberArk SaaS target architecture.
• Design the migration approach, including pilot, waves, cutover, and rollback.
• Map safes, accounts, permissions, platforms, and policies to the target state.
• Define identity, authentication, MFA, and access control model.
• Design required integrations with AD/Entra ID, SIEM, ITSM, and monitoring tools.
• Identify technical, security, and operational migration risks.Guide implementation teams during configuration, migration, and testing.
• Define and support test scenarios for access, password rotation, session recording, and logging.
• Prepare architecture, migration, operational, and handover documentation.

Skills

PAM/CyberArk Architect

CyberArk SaaS

IAM

RBAC

MFA

Hybrid environments

Security compliance

CyberArk migrations

SAML/SSO

Tools

CyberArk

Job description

Summary:

The primary objective of this role is to design and implement a comprehensive CyberArk SaaS architecture for privileged access management (PAM). This includes defining migration strategies and ensuring secure access solutions that comply with operational requirements.

Main Responsibilities:

• Define the CyberArk SaaS target architecture.
• Design the migration approach, including pilot, waves, cutover, and rollback.
• Map safes, accounts, permissions, platforms, and policies to the target state.
• Define identity, authentication, MFA, and access control model.
• Design required integrations with AD/Entra ID, SIEM, ITSM, and monitoring tools.
• Identify technical, security, and operational migration risks.Guide implementation teams during configuration, migration, and testing.
• Define and support test scenarios for access, password rotation, session recording, and logging.
• Prepare architecture, migration, operational, and handover documentation.

Key Requirements:

• Proven experience as a PAM/CyberArk Solution Architect.
• Hands‑on experience with CyberArk on‑premises and SaaS solutions.
• Experience with CyberArk migration projects, preferably from on‑premises to SaaS.
• Strong understanding of IAM, privileged access, SSO, MFA, and RBAC.
• Experience with enterprise infrastructure, networking, and hybrid environments.
• Knowledge of security, audit, and compliance requirements for privileged access.

Nice to Have:

• Ability to work effectively with security, infrastructure, operations, applications, and vendor teams.
• Relevant CyberArk certifications preferred: Defender, Sentry, or Guardian.

Other Details:

• Location: Remote
• Years of experience: +10 Years
• Preferred start date/end date: ASAP – 31.12.2027