CyberArk PAM Architect - W2

Prudent Technologies and Consulting, Inc.; Jersey City (NJ); On-site; USD 140,000 - 190,000; Full time

Job summary

Prudent Technologies and Consulting, Inc. is seeking a senior Privileged Access Management architect to lead CyberArk deployments across on-prem, cloud, and hybrid environments.

You will design high‑level and low‑level PAM solutions, align with security standards, and collaborate with US‑based stakeholders to drive modernization efforts. The role requires 10+ years building PAM/EPM solutions, strong scripting skills, and experience in audits, governance, and cross‑functional delivery.

Qualifications

• 10+ years of experience designing, architecting and implementing PAM/EPM in complex enterprise environments.
• Hands-on CyberArk expertise across Vault, CPM, PVWA, PSM, PSMP and AIM/CCP.
• Experience with LDAP/AD, SIEM, MFA and IAM integrations for privileged access controls.
• Strong scripting skills (PowerShell, Python) to automate PAM tasks.
• Knowledge of regulatory standards (NIST, CIS, SOX, PCI-DSS, HIPAA, GDPR).
• Ability to lead client discussions, workshops and design reviews with US-based stakeholders.

Responsibilities

• Serve as SME for Privileged Access Management, providing architecture guidance and best practices across CyberArk platforms.
• Partner with business, security, infrastructure, and application teams to assess PAM risks and define roadmaps.
• Evaluate and modernize PAM/identity security environments and drive adoption of privileged access controls.
• Lead client-facing design reviews and workshops, translating requirements into PAM solutions.
• Provide governance, lifecycle management, and documentation for PAM deployments; ensure regulatory alignment.

Skills

Verbal communication

Written communication

Problem solving

Collaboration

Leadership

Education

University degree in IT or IT Security

Tools

CyberArk PAM

CyberArk Vault

CyberArk PVWA

CyberArk CPM

CyberArk PSM

PSM/PSMP

CyberArk PTA

LDAP/AD integration

SIEM integration

REST APIs

Job description

Key Note: Must be authorized to work in the U.S. on a W2 basis without current or future visa sponsorship. Qualified candidates who meet the requirements are encouraged to apply.

Years of Experience

• 10+ years of relevant experience in designing, architecting, and implementing PAM and EPM solutions across complex enterprise environments.

General Description

• Serve as the subject matter expert for Privileged Access Management (PAM), providing architecture guidance and best practices across CyberArk platforms.


• Partner with business, security, infrastructure, and application teams to assess privileged access risks, define PAM roadmaps, and deliver secure, scalable solutions aligned with organizational objectives.


• Evaluate existing PAM and identity security environments, recommend modernization and optimization strategies, and drive adoption of industry-leading privileged access controls.


• Lead client-facing discussions, workshops, and design reviews with US-based stakeholders, translating business and compliance requirements into effective PAM solutions.


• Provide governance, operational oversight, and lifecycle management for PAM platforms, including continuous improvement, upgrade planning, troubleshooting, documentation, and adherence to security and regulatory standards.

Technical Requirements

• Creating and implementing strategies for managing privileged access using CyberArk, designing PAM solutions, and ensuring the secure storage, management, and retrieval of sensitive credentials in enterprise environments.


• Developing and enforcing security policies, access controls, and privileged access management procedures using CyberArk capabilities to mitigate security risks and support compliance requirements.


• Design secure and scalable CyberArk PAM solutions, creating High-Level Designs (HLDs) and Low-Level Designs (LLDs) for cloud, on-premises, and hybrid environments while working closely with US-based stakeholders.


• Implement, oversee, and document high-level and low-level designs for CyberArk deployments, defining PAM strategies aligned with business, security, and regulatory requirements.


• Collaborate with automation SPOCs, application teams, and onsite stakeholders to build, test, and optimize PAM-related automation solutions.


• Design, deploy, and support high-performance, highly available CyberArk PAM environments with large-scale target endpoints, creating workflows, custom connectors, policies, and integrations.


• Should be capable of deploying, installing, and configuring CyberArk components (Vault, CPM, PVWA, PSM, PSMP, AIM/CCP) as per client requirements.


• Develop custom plugins, integrations, and connectors for CyberArk CPM/PSM Password Safe/PRA components, as required.


• Hands-on experience or knowledge in configuring CyberArk PTA, Endpoint Privilege Management (EPM) and privileged access monitoring capabilities.


• Integrating various platforms with CyberArk, including Windows, UNIX/Linux, databases, network devices, SSH keys, cloud platforms, SAP, and enterprise applications.


• Creating and managing Safes, platforms, owners, vault policies, asset groups, account management policies, and access controls within CyberArk environments.


• Should be familiar with CyberArk Password Upload Utility, PACLI, REST APIs, and corresponding administration, onboarding, and integration utilities/tools.


• Experience in integrating CyberArk solutions with LDAP/Active Directory, SIEM, SNMP, MFA, and other identity and access management systems.


• Strong scripting skills using PowerShell, Python, Shell scripting, or APIs to automate tasks, develop integrations, and customize CyberArk solutions.


• Knowledge of regulatory requirements and industry standards related to privileged access management, including NIST, CIS, SOX, PCI-DSS, HIPAA, and GDPR.


• Experience with security monitoring tools and integrating CyberArk with Security Information and Event Management (SIEM) platforms; ability to support client workshops, design discussions, and solution reviews in an onsite US-facing environment.

Soft Skills

• Excellent Verbal and written communication skills in English.


• Ability to present solutions to clients in person and remotely if needed.


• Good documentation skills that will enable creation of design documents for the technical solutions proposed.


• Excellent problem-solving skills.


• Good collaboration skills in working with virtual and distributed teams.

Certifications

• Good to have relevant PAM certifications such as:


• CyberArk Certified Sentry (CCS)


• CyberArk Certified Guardian (CCG)


• CISSP (Certified Information Systems Security Professional)

Educational Qualifications

• University degree in IT or/and IT Security