CyberArk Architect

Anagh Technologies Inc; United States; Remote; USD 140,000 - 180,000; Full time

Job summary

Anagh Technologies is seeking a CyberArk Architect to define enterprise PAM architecture, strategy, standards, and a multi-year roadmap across on-prem, cloud, and hybrid environments.

The role provides technical leadership through the solution lifecycle, emphasizing least privilege, resilience, auditability, and scalable cyber security across remote work setups. This is a remote, W2 engagement lasting 12+ months.

Qualifications

• Experience designing enterprise PAM architectures with CyberArk.
• Experience implementing CyberArk across on-prem, cloud, and hybrid.
• Strong understanding of least-privilege and access controls.
• Ability to define roadmaps and architecture governance.

Responsibilities

• Define enterprise PAM strategy and multi-year roadmap.
• Design secure CyberArk solutions across environments.
• Lead architecture governance and design reviews.
• Collaborate with security, IAM, and cloud teams.

Skills

CyberArk

PAM Architecture

Security Architecture

Cloud & On-Prem

Tools

CyberArk PVWA

CyberArk CPM

Conjur

Job description

We have 1 urgent openings for "CyberArk Architect". This is remote role.

Only looking for candidates who can work on W2

Strictly no C2C or third-party vendors

Location: Remote

Duration: 12+ months

Job Description:

The CyberArk Architect is responsible for defining the enterprise Privileged Access Management (PAM) architecture, strategy, standards, and roadmap. The role translates security, business, regulatory, and operational requirements into scalable CyberArk solutions across on-premises, cloud, and hybrid environments. The Architect provides technical leadership throughout the solution lifecycle and ensures that designs support least privilege, resilience, integration, automation, auditability, and sustainable operations.

Key Roles and Responsibilities

Enterprise PAM Strategy and Roadmap

• Define the target-state CyberArk architecture and a multiyear PAM roadmap aligned with enterprise security, identity, cloud, and zero-trust strategies.


• Assess current capabilities, technical debt, control gaps, and business demand to prioritize platform modernization and expansion initiatives.


• Establish architectural principles, reference patterns, product standards, and decision criteria for PAM use cases.


• Advise leadership on platform options, investment priorities, licensing considerations, implementation sequencing, and technical risks.


• Track CyberArk product capabilities and security developments and recommend appropriate adoption plans.

Solution Architecture and Design

• Design secure, scalable, and supportable CyberArk solutions for PAM Self-Hosted, Privilege Cloud, or hybrid deployments


• Develop logical, physical, network, integration, data-flow, and deployment architectures covering the Digital Vault, PVWA, CPM, PSM, PSMP, Secrets Manager (Conjur) connectors, and disaster-recovery components, as applicable.


• Define sizing, segmentation, connectivity, firewall, certificate, authentication, encryption, logging, retention, and administrative-access requirements.


• Design high-availability, business-continuity, backup, disaster-recovery, and regional resiliency patterns with measurable recovery objectives.


• Create architecture diagrams, design documents, interface specifications, configuration standards, and implementation guardrails.

Privileged Access and Control Design

• Define enterprise models for Safes, platforms, account ownership, access roles, segregation of duties, approval workflows, dual control, and emergency access.


• Establish patterns for credential rotation, verification, reconciliation, session isolation, recording, monitoring, just-in-time access, and privileged-account lifecycle management.


• Develop architecture patterns for administrator accounts, service accounts, application identities, SSH keys, databases, network devices, cloud workloads, and DevOps secrets.


• Ensure privileged-access designs satisfy least-privilege, audit, privacy, data-retention, and regulatory requirements.


• Review and approve exceptions, compensating controls, and risk-treatment plans for nonstandard use cases.

Integration and Automation Architecture

• Define integration patterns for directory services, identity governance, multifactor authentication, SIEM, IT service management, cloud platforms, DevOps toolchains, certificate services, and security operations.


• Establish API, connector, plugin, and automation standards for discovery, onboarding, provisioning, reporting, and operational workflows.


• Design secure machine-to-machine credential and secrets-management capabilities using approved CyberArk services.


• Ensure integrations use resilient authentication, authorization, network, logging, error-handling, and secrets-protection practices.


• Promote reusable templates, infrastructure as code, automated testing, and controlled deployment pipelines.

Architecture Governance and Delivery Assurance

• Lead architecture workshops, requirements reviews, technical design reviews, proof-of-concept activities, and solution assurance checkpoints.


• Validate that detailed designs and implementations conform to approved architecture, CyberArk guidance, security baselines, and operational standards.


• Identify architectural risks, dependencies, constraints, and assumptions; define mitigation and escalation plans.


• Provide technical direction to CyberArk engineers, integrators, vendors, and managed-service teams without replacing delivery ownership.


• Maintain architecture decisions, patterns, standards, and technology lifecycle documentation.

Security, Risk, and Compliance

• Translate control requirements and threat scenarios into preventive, detective, and recovery architecture controls.


• Perform or support threat modeling, security assessments, vulnerability reviews, and design risk evaluations.


• Define logging, monitoring, alerting, privileged-session evidence, and reporting requirements for security operations and auditors.


• Partner with risk, compliance, privacy, internal audit, and security teams to demonstrate control effectiveness and remediate findings.


• Ensure architecture decisions protect credential confidentiality, platform integrity, service availability, and forensic evidence.

Stakeholder Leadership

• Partner with security, IAM, infrastructure, cloud, network, application, database, DevOps, audit, and service-management leaders.


• Translate complex architecture decisions into clear business impact, risk, cost, and delivery considerations for executive and technical audiences.


• Facilitate consensus across stakeholders and resolve cross-domain design issues and ownership boundaries.


• Mentor engineering and operations teams and deliver architecture knowledge transfer, standards training, and design guidance.


• Support vendor evaluations, statements of work, implementation plans, and technical acceptance criteria.

ABOUT US:

Anagh Technologies is a technical consulting firm specializing in UI, Front-End, and Full-Stack web technologies. We currently have 30+ positions in Angular, React, Node, and Java.