Associate Principal Engineer PAM System Architect (CyberArk Architect)

We are a Digital Product Engineering company that is scaling in a big way! We build products, services, and experiences that inspire, excite, and delight. We work at scale across all devices and digital mediums, and our people exist everywhere in the world (18500+ experts across 40 countries, to be exact). Our work culture is dynamic and non-hierarchical. We're looking for great new colleagues. That's where you come in!

REQUIREMENTS:

• Total experience:9+ years.
• Strong hands-on experience withCyberArk Privileged Access Security (PAS) architecture, implementation, and administration.
• Must-have expertise inCyberArk Vault architecture, migrations, and enterprise PAM solution design.
• Strong experience performingCyberArk component upgrades, includingPVWA, CPM, PSM, and PSMP, along with Windows and Linux OS upgrades.
• Hands-on experience designinghigh-availability, disaster recovery, and multi-site CyberArk deployments.
• Strong knowledge ofWindows, Linux, Active Directory, DNS, networking, firewalls, load balancers, and SSL/TLS certificate management.
• Experience executinglarge-scale CyberArk migrations, including account onboarding, credential migration, and environment consolidation.
• Strong expertise inplatform governance, secure hardening, lifecycle management, and privileged access operational best practices.
• Experience diagnosing and resolvingcomplex infrastructure, platform, and connectivity issues across enterprise environments.
• Strong experience creatingCyberArk architecture standards, technical documentation, and deployment blueprints.
• Good-to-haveCyberArk CDE certification.
• Good-to-have experience withAWS, Azure, or GCP,PowerShell/Python scripting, andDevOps pipelines with secrets management.
• Strong leadership, stakeholder management, analytical, problem-solving, mentoring, and communication skills.

RESPONSIBILITIES:

• Lead the architecture, design, and implementation of enterpriseCyberArk Privileged Access Management (PAM) solutions.
• Design scalable, secure, and highly availableCyberArk Vault architectures, including disaster recovery and multi-site deployments.
• ExecuteCyberArk Vault migrations, platform consolidations, and enterprise-wide account onboarding initiatives.
• PerformCyberArk component upgrades (PVWA, CPM, PSM, PSMP) and Windows/Linux OS upgrades while ensuring minimal business disruption.
• Design and implement secure CyberArk environments with infrastructure hardening and enterprise system integrations.
• Troubleshoot and resolve complex infrastructure issues involving Windows, Linux, networking, Active Directory, DNS, firewalls, certificates, and connectivity.
• Establish CyberArk platform governance, operational best practices, lifecycle management processes, and secure access models.
• Develop architecture blueprints, technical standards, deployment documentation, and implementation best practices.
• Collaborate with infrastructure, security, cloud, and application teams to ensure seamless CyberArk adoption and platform stability.
• Mentor engineering teams and provide technical leadership during architecture reviews, migrations, upgrades, and critical production incidents.
• Implement automation and operational improvements usingPowerShell, Python, and DevOps practices where applicable.
• Stay updated with emerging CyberArk capabilities, cloud security trends, PAM best practices, and enterprise security standards.

Bachelor’s or master’s degree in computer science, Information Technology, or a related field.