[Hiring] CyberArk Architect @KeyData Cyber

Role Description

We are currently looking for a CyberArk Architect to join the Identity & Access Management (IAM) team. In this role, you will be responsible for designing, implementing, and supporting enterprise Privileged Access Management (PAM) solutions using CyberArk across complex environments. You will play a key role in architecting secure privileged access strategies, enabling cloud-based privileged access, and driving governance frameworks. This role will support enterprise CyberArk initiatives across privileged access, cloud PAM, and identity security domains.

Current priorities include:

• CyberArk Privileged Cloud
• Workforce Password Management
• Vendor Privileged Access solutions
• Supporting broader PAM programs

Location: United States, Remote

Employment Type: Full Time

Working Hours: This role follows Pacific Standard Time (PST) hours, from 9:00 AM to 5:00 PM

Qualifications

• Bachelor’s or Master’s degree in Computer Science, Computer Engineering, Information Systems, or equivalent experience.
• 3+ years of experience in Information Security / Cybersecurity.
• 3+ years of hands-on experience designing and implementing CyberArk PAM solutions, including CyberArk Privileged Cloud.
• Strong experience in CyberArk Workforce Password Management and Vendor Privileged Access Management implementations.
• Proven experience in gathering PAM business requirements and translating them into technical design documents.
• Experience defining PAM strategies, roadmaps, and governance frameworks for enterprise clients.
• Hands-on experience with CyberArk components (Vault, CPM, PSM) and cloud-based PAM deployments.
• Good understanding of infrastructure technologies including databases, LDAP, directory services, operating systems, and networking.
• Strong problem-solving skills with the ability to communicate complex technical concepts effectively.
• Ability to work independently as well as collaboratively within a team environment.
• Excellent verbal and written communication skills.

Requirements

• Act as the lead architect and SME for Privileged Access Management (PAM) solutions, including CyberArk Privileged Cloud, CyberArk Identity, and related privileged access capabilities.
• Design and implement secure solutions for privileged credential management, including Workforce Password Management, Vendor Privileged Access, session controls, and secure third-party access.
• Lead deployment of browser extensions, mobile applications, user onboarding, and phased adoption activities related to Workforce Password Management solutions.
• Collaborate with clients, system administrators, and application owners to define PAM requirements and design scalable, secure architectures.
• Develop end-to-end solution architecture, detailed technical designs, and support deployment and implementation activities.
• Define and implement PAM governance frameworks, policies, and operational processes.
• Assess client environments to identify security gaps, recommend improvements, and define target architectures and roadmaps.
• Lead implementation of CyberArk components including vault, CPM, PSM, Secure Web Sessions and cloud-native privileged access solutions.
• Support integration with cloud platforms and enterprise systems for privileged access use cases.
• Develop SOPs, runbooks, and implementation/deployment plans for privileged access and identity governance solutions.
• Provide technical leadership, mentor junior engineers/architects, and guide delivery teams.
• Conduct knowledge transfer sessions and educate stakeholders on PAM architecture, frameworks, and best practices.
• Collaborate with cross-functional teams to ensure seamless integration with infrastructure, applications, and security tools.

Nice-to-Have Skills

• CyberArk certifications such as Certified Delivery Engineer (CDE), Sentry, Certified Delivery Engineer (CDE), Privilege Cloud, or Identity certifications.
• Experience in consulting or client-facing roles.
• Knowledge of programming/scripting languages such as Java, Python, or PowerShell.
• Familiarity with cloud platforms (AWS, Azure, GCP) and their privileged access models.
• Security certifications such as CISSP, CISM, or equivalent.

Benefits

• At KeyData Cyber, we put people first, valuing learning, growth, and work-life balance.
• Extensive opportunities to advance your career through leading digital identity projects across North America.
• Our culture is built on respect, inclusion, and equal opportunity for everyone.

Accessibility & Accommodations

If you require accommodation due to a disability at any time during the recruitment and/or assessment process, please contact Talent Acquisition, and we will make all reasonable efforts to accommodate your request.

BrightHire technology is used during the preliminary interview stage for recording, transcription, and candidate evaluation as part of our hiring process.

Apply now to join the KeyData Cyber team and be part of our mission to secure the future of digital identity across North America.