emagine
PAM Solution Architect
Designs and implements a CyberArk SaaS privileged access management (PAM) architecture, defining the migration strategy (pilot, waves, cutover, rollback), mapping safes/accounts/policies, and setting identity, MFA, and integration models with AD/Entra ID, SIEM, and ITSM while guiding implementation and testing teams.
- Compensation
- Not disclosed
- Location
- Poland
- Work setup
- Remote
- Seniority
- Not specified
- Employment
- Not specified
- Experience
- Not specified
- Category
- Architecture
- Posted
Skills
Must have
- Proven experience as a PAM/CyberArk Solution Architect
- Hands-on experience with CyberArk on-premises and SaaS solutions
- Experience with CyberArk migration projects, preferably from on-premises to SaaS
- Strong understanding of IAM, privileged access, SSO, MFA, and RBAC
- Experience with enterprise infrastructure, networking, and hybrid environments
- Knowledge of security, audit, and compliance requirements for privileged access
- 10+ years of experience
Nice to have
- Ability to work effectively with security, infrastructure, operations, applications, and vendor teams
- CyberArk certifications: Defender, Sentry, or Guardian
Full description
Summary:
The primary objective of this role is to design and implement a comprehensive CyberArk SaaS architecture for privileged access management (PAM). This includes defining migration strategies and ensuring secure access solutions that comply with operational requirements.
Main Responsibilities:
- Define the CyberArk SaaS target architecture.
- Design the migration approach, including pilot, waves, cutover, and rollback.
- Map safes, accounts, permissions, platforms, and policies to the target state.
- Define identity, authentication, MFA, and access control model.
- Design required integrations with AD/Entra ID, SIEM, ITSM, and monitoring tools.
- Identify technical, security, and operational migration risks.
- Guide implementation teams during configuration, migration, and testing.
- Define and support test scenarios for access, password rotation, session recording, and logging.
- Prepare architecture, migration, operational, and handover documentation.
Key Requirements:
- Proven experience as a PAM/CyberArk Solution Architect.
- Hands-on experience with CyberArk on-premises and SaaS solutions.
- Experience with CyberArk migration projects, preferably from on-premises to SaaS.
- Strong understanding of IAM, privileged access, SSO, MFA, and RBAC.
- Experience with enterprise infrastructure, networking, and hybrid environments.
- Knowledge of security, audit, and compliance requirements for privileged access.
Nice to Have:
- Ability to work effectively with security, infrastructure, operations, applications, and vendor teams.
- Relevant CyberArk certifications preferred: Defender, Sentry, or Guardian.
Other Details:
- Location: Remote
- Years of experience: +10 Years
- Preferred start date/end date: ASAP – 31.12.2027