Remote CyberArk PAM Architect — SaaS Migration Lead

emagine; Polska; Remote; PLN 180,000 - 240,000; Full time

Job summary

emagine is seeking a highly experienced PAM/CyberArk Solution Architect to design and implement a comprehensive CyberArk SaaS architecture for privileged access management. This role includes migration strategy, risk assessment, and defining secure access controls that meet operating requirements.

You will map safes, accounts and permissions to the target state, define identity, MFA and RBAC models, and integrate with AD/Entra ID, SIEM, ITSM and monitoring tools.

Qualifications

• Proven experience as a PAM/CyberArk Solution Architect.
• Hands-on CyberArk on-premises and SaaS implementations.
• Experience migrating from on-premises to SaaS.
• Strong IAM, privileged access, SSO, MFA, and RBAC knowledge.

Responsibilities

• Define the CyberArk SaaS target architecture.
• Design the migration approach, including pilot, waves, cutover, and rollback.
• Map safes, accounts, permissions, platforms, and policies to the target state.
• Define identity, authentication, MFA, and access control model.
• Design required integrations with AD/Entra ID, SIEM, ITSM, and monitoring tools.
• Identify technical, security, and operational migration risks.
• Guide implementation teams during configuration, migration, and testing.
• Define and support test scenarios for access, password rotation, session recording, and logging.
• Prepare architecture, migration, operational, and handover documentation.

Skills

PAM Solutions Architecture

CyberArk

IAM / Privileged Access

Tools

CyberArk on-premises

CyberArk SaaS

Job description

emagine is seeking a highly experienced PAM/CyberArk Solution Architect to design and implement a comprehensive CyberArk SaaS architecture for privileged access management. This role includes migration strategy, risk assessment, and defining secure access controls that meet operating requirements.

You will map safes, accounts and permissions to the target state, define identity, MFA and RBAC models, and integrate with AD/Entra ID, SIEM, ITSM and monitoring tools.