Lead CyberArk EPM Architect – Enterprise Migrations

ReqRoute,Inc; Milpitas (CA); On-site; USD 180,000 - 240,000; Full time

Job summary

ReqRoute,Inc is seeking an experienced CyberArk EPM Architect to lead design, deployment, and migration of endpoint privilege management across enterprise Windows and macOS environments. You will drive end-to-end migrations between tenants, implement privilege strategies, and integrate with Intune, MECM/SCCM, SIEM, and other platforms.

The role requires 7+ years in endpoint security with 4+ years in CyberArk EPM, strong scripting and API automation skills, and collaboration with security, IT,

Qualifications

• 7+ years of endpoint security experience with 4+ years hands-on CyberArk EPM architecture.
• Proven experience deploying CyberArk EPM in large enterprise environments.
• Strong experience migrating EPM tenants/environments, including policy and configuration migration.
• Deep understanding of application control, privilege management, allow/block rules, elevation policies, and sub-process elevation.
• Strong PowerShell scripting and API automation experience.
• Experience with Microsoft Intune, MECM/SCCM, Active Directory, Entra ID, Windows security, and endpoint management.
• Strong troubleshooting, communication, documentation, and stakeholder management skills.
• Must have: CyberArk PAM
• Must have: Okta

Responsibilities

• Architect, deploy, and configure CyberArk EPM across enterprise Windows and macOS environments.
• Lead end-to-end migration of CyberArk EPM policies, configurations, application groups, and rule sets from one environment/tenant to another.
• Design and implement application control, privilege elevation, and least privilege strategies.
• Develop, optimize, and troubleshoot EPM policies, trusted applications, and elevation rules.
• Integrate CyberArk EPM with enterprise identity, security, and endpoint management platforms (Microsoft Intune, MECM/SCCM, SentinelOne, SIEM, etc.).
• Automate deployment, policy management, and migration activities using PowerShell and REST APIs.
• Perform architecture reviews, health assessments, and recommend best practices for performance, scalability, and security.
• Collaborate with security, infrastructure, desktop engineering, and application teams throughout implementation and migration projects.
• Create technical documentation, migration runbooks, and operational procedures.
• Provide Level 3/4 technical support and mentor engineering teams.

Skills

CyberArk EPM

PowerShell scripting

API automation

Intune

MECM/SCCM

Active Directory

Entra ID

Windows security

Endpoint management

Troubleshooting

Documentation

Stakeholder management

Security architecture

Tools

CyberArk PAM

Okta

SIEM

REST APIs

EDR/XDR

ITSM

Job description

ReqRoute,Inc is seeking an experienced CyberArk EPM Architect to lead design, deployment, and migration of endpoint privilege management across enterprise Windows and macOS environments. You will drive end-to-end migrations between tenants, implement privilege strategies, and integrate with Intune, MECM/SCCM, SIEM, and other platforms.

The role requires 7+ years in endpoint security with 4+ years in CyberArk EPM, strong scripting and API automation skills, and collaboration with security, IT,