Principal Architect SME – CyberArk

Antimony LLC; Washington; On-site; USD 160,000 - 230,000; Full time

Job summary

Antimony LLC seeks a CyberArk Principal Architect / Privileged Access Management (PAM) SME to serve as the senior technical authority for architecture, implementation, and operation of an enterprise CyberArk PAM environment supporting a large federal customer.

You will provide architectural leadership for a highly available, multi-tenant CyberArk solution hosted within AWS GovCloud / FedRAMP High, ensuring PAM meets federal security requirements, availability objectives, DR requirements, and

Qualifications

• Bachelor’s degree in CS, cybersecurity, or related field; 10+ years IAM experience.
• 7+ years CyberArk engineering/architecture in large enterprise.
• Experience with PIV/MFA/SSO, audit logging, and 24x7 operations.
• Strong leadership, mentoring, and cross-team collaboration.

Responsibilities

• Serve as senior technical authority for CyberArk PAM architecture and operations.
• Design, implement, and integrate PAM in AWS GovCloud / FedRAMP High.
• Lead architecture reviews, troubleshooting, and knowledge transfer.
• Ensure security requirements, availability, DR, and SLAs.

Skills

Leadership & mentoring

CyberArk architecture

Federal/regulated environment

Problem solving

Stakeholder communication

Education

Bachelor's degree in Computer Science or related field

Tools

CyberArk PAS/PAM

Vault

CPM

PSM

PVWA

AWS GovCloud

FISMA/RMF

Conjur

EPM

SWS

Ansible

Splunk

HSM (FIPS 140-2/140-3)

PIV/MFA/SSO

Job description

Company Description

Antimony LLC is a technology consulting firm focused on delivering specialized expertise in security, architecture, and enterprise-scale solutions. The company partners with clients across industries to design, implement, and optimize secure, resilient IT environments. Antimony LLC values practical innovation, clear communication, and strong collaboration with client teams. Professionals joining the company can expect to work on complex, high-impact projects that require deep technical knowledge and thoughtful problem-solving.

Role Description

The CyberArk Principal Architect / Privileged Access Management (PAM) SME will serve as the senior technical authority for the architecture, implementation, integration, security, and operation of an enterprise CyberArk PAM environment supporting a large federal customer. The individual will provide architectural leadership for a highly available, multi-tenant CyberArk environment hosted within AWS GovCloud / FedRAMP High, supporting privileged access across on-premises and cloud infrastructure.

The Principal Architect will work with cybersecurity, ICAM, cloud, infrastructure, application, and operations teams to ensure the PAM solution meets federal security requirements, availability objectives, disaster recovery requirements, and operational SLAs.

Qualifications

Bachelor’s degree in Computer Science, Cybersecurity, Engineering, Information Systems, or related field; 10+ years of cybersecurity/IAM experience with 7+ years of deep CyberArk PAM engineering/architecture experience.

• Expert knowledge of CyberArk PAS/PAM components including Vault, CPM, PSM, PVWA, safes, account onboarding/reconciliation, session management, HA/DR, and enterprise integrations.
• Experience architecting CyberArk in large, highly regulated federal or comparable enterprise environments and AWS/cloud-hosted environments.
• Experience with PIV/MFA/SSO, privileged access controls, audit logging, FISMA/RMF, vulnerability remediation, and 24x7 production operations.
• Ability to lead complex troubleshooting, solution design, technical reviews, and mentoring/knowledge transfer.
• CyberArk technical certification(s) appropriate to senior architecture/engineering responsibilities required or strongly preferred.
• Prior experience serving as a CyberArk Architect, Principal Architect, or Lead PAM Engineer for a federal agency.

Desired Qualifications:

• Recent federal delivery experience supporting CyberArk PAM in a managed-service environment.
• Experience with large CyberArk deployments.
• Experience with Conjur, EPM, SWS, Ansible, Splunk, AWS GovCloud, and FIPS 140-2/140-3 HSM solutions.
• Strong communicator able to work effectively with federal agency stakeholders, bureau teams, technical teams, and vendors. Highly organized and outcome-focused; able to manage competing priorities in a 24x7 managed-service environment. Proactive problem-solver who can operate with limited direction and drive issues through resolution. Comfortable in Agile/Scrum/Kanban and ITIL-aligned environments with disciplined change, incident, and problem management. Adaptable to changing BPA Call priorities, security requirements, and SLA-driven delivery. Strong written and verbal communication skills with the ability to communicate architecture and security concepts to Government technical and management stakeholders. Ability to provide technical leadership and mentoring to CyberArk engineers and administrators