Senior Cybersecurity Architect - CyberArk / PAM

About the role

The Senior Cybersecurity Architect designs, implements and maintains enterprise Privileged Access Management (PAM) solutions, primarily with CyberArk technologies. The role leads the architecture of secure identity and secrets management platforms across on-premises and cloud environments, so that privileged access controls meet security best practices, regulatory requirements and business objectives.

Key responsibilities

• Define and maintain the enterprise architecture for CyberArk solutions (Vault, CPM, PSM, PVWA, Privileged Threat Analytics, Conjur).
• Design privileged access controls based on least privilege, separation of duties and time-bound access.
• Architect and implement CyberArk on Windows, Linux, UNIX, databases and cloud environments (AWS, Azure, GCP).
• Lead the design and implementation of CyberArk Conjur, including policy-as-code, secret lifecycle automation, dynamic secrets and Kubernetes integrations.
• Manage the complete secrets lifecycle: password rotation, SSH key management, API credential vaulting and secure credential retrieval.
• Ensure PAM platform availability and resilience through monitoring, automated remediation, incident response and disaster recovery planning.
• Partner with engineering, infrastructure, cloud and application teams to embed privileged access controls into new platforms, migrations and upgrades.
• Embed PAM and secrets management into CI/CD pipelines and cloud-native workloads.
• Automate CyberArk operations with PowerShell, Python and REST APIs for onboarding, offboarding, rotation and reporting.
• Review session recordings, analytics and threat intelligence to support risk-based decisions, and evaluate emerging PAM technologies.
• Provide senior technical guidance during security incidents and communicate architecture decisions to technical teams, business stakeholders and management.

Required profile

• Bachelor's degree in Computer Science, Information Security, Engineering or a related field; a Master's is an advantage.
• 7-10 years of experience in cybersecurity, identity security or privileged access management.
• Strong hands-on experience architecting, implementing and operating CyberArk at enterprise scale.
• Excellent communication, stakeholder management and influencing skills in a multinational environment.

Required skills

• Advanced knowledge of CyberArk Vault, CPM, PSM, PVWA and Privileged Threat Analytics.
• Expertise in CyberArk Conjur, including policy-as-code, secret rotation, dynamic secrets and Kubernetes secret injection.
• Windows, Linux and UNIX authentication; Active Directory, LDAP, Kerberos, SSH and database authentication.
• Integration with identity providers and SSO via SAML, OIDC or Active Directory.
• PowerShell, Python and REST API automation; AWS Secrets Manager, Azure Key Vault or similar.
• Hybrid identity environments, Zero Trust principles and high-availability identity platforms with disaster recovery.

What we offer

• An international community of 110+ nationalities.
• A training system with an internal Academy and 250+ modules.
• Internal events such as afterworks and team building.
• Sustainability initiatives and the WeCare Together programme.