CyberArk EPM Architect – Enterprise Privilege Management

Expedite Talent Solutions; Richardson (TX); On-site; USD 165,312 - 247,968; Full time

Job summary

Expedite Talent Solutions seeks a highly experienced CyberArk EPM Architect to lead design, implementation, governance and optimization of EPM across enterprise environments. Deep expertise in privilege management, Windows security, app control, least privilege enforcement, and endpoint hardening is required.

The role involves overseeing architecture, deployment, governance, and compliance activities, coordinating with AD/Entra ID, SIEM, ITSM, and security teams worldwide.

Qualifications

• 5+ years of CyberArk EPM implementation experience.
• Experience designing enterprise-level privilege management solutions.
• Strong understanding of Windows internals and application whitelisting.
• Experience leading global deployment and migration projects.
• Experience with CyberArk Identity Security Platform.

Responsibilities

• Design and architect CyberArk EPM solutions for global enterprise environments.
• Define least privilege security models and endpoint privilege elevation strategies.
• Develop scalable EPM policies, application control frameworks, and endpoint security standards.
• Design integrations with Active Directory, Microsoft Entra ID, SIEM, ITSM, and other security tools.
• Review existing endpoint security controls and recommend improvements.
• Lead end-to-end CyberArk EPM implementation and migration projects.
• Configure and manage: Privilege Elevation, Application Control, Threat Protection, Credential Theft Protection, Adaptive Application Controls.
• Deploy EPM agents across Windows and macOS endpoints.
• Establish governance processes for endpoint privilege management.
• Conduct security reviews and privilege access assessments.
• Define operational SOPs and support models.
• Review exceptions and risk acceptance requests.
• Ensure compliance with internal security standards.

Skills

CyberArk EPM

Privilege Elevation

Application Control

Endpoint Threat Protection

Credential Theft Protection

Least Privilege Enforcement

Windows Security

Active Directory

Tools

PowerShell

Windows Batch Scripting

REST API Integrations

CyberArk API

SIEM (Splunk, Sentinel, QRadar)

ServiceNow

Job description

Expedite Talent Solutions seeks a highly experienced CyberArk EPM Architect to lead design, implementation, governance and optimization of EPM across enterprise environments. Deep expertise in privilege management, Windows security, app control, least privilege enforcement, and endpoint hardening is required.

The role involves overseeing architecture, deployment, governance, and compliance activities, coordinating with AD/Entra ID, SIEM, ITSM, and security teams worldwide.