Associate Principal Engineer PAM System Architect (CyberArk Architect)

Job description

We are a Digital Product Engineering company that is scaling in a big way! We build products, services, and experiences that inspire, excite, and delight. We work at scale across all devices and digital mediums, and our people exist everywhere in the world (18500+ experts across 40 countries, to be exact). Our work culture is dynamic and non-hierarchical. We're looking for great new colleagues. That's where you come in! REQUIREMENTS: - Total experience: **9+ years**. - Strong hands-on experience with **CyberArk Privileged Access Security (PAS)** architecture, implementation, and administration. - Must-have expertise in **CyberArk Vault architecture, migrations, and enterprise PAM solution design**. - Strong experience performing **CyberArk component upgrades**, including **PVWA, CPM, PSM, and PSMP**, along with Windows and Linux OS upgrades. - Hands-on experience designing **high-availability, disaster recovery, and multi-site CyberArk deployments**. - Strong knowledge of **Windows, Linux, Active Directory, DNS, networking, firewalls, load balancers, and SSL/TLS certificate management**. - Experience executing **large-scale CyberArk migrations**, including account onboarding, credential migration, and environment consolidation. - Strong expertise in **platform governance, secure hardening, lifecycle management, and privileged access operational best practices**. - Experience diagnosing and resolving **complex infrastructure, platform, and connectivity issues** across enterprise environments. - Strong experience creating **CyberArk architecture standards, technical documentation, and deployment blueprints**. - Good-to-have **CyberArk CDE certification**. - Good-to-have experience with **AWS, Azure, or GCP**, **PowerShell/Python scripting**, and **DevOps pipelines with secrets management**. - Strong leadership, stakeholder management, analytical, problem-solving, mentoring, and communication skills. RESPONSIBILITIES: - Lead the architecture, design, and implementation of enterprise **CyberArk Privileged Access Management (PAM)** solutions. - Design scalable, secure, and highly available **CyberArk Vault architectures**, including disaster recovery and multi-site deployments. - Execute **CyberArk Vault migrations**, platform consolidations, and enterprise-wide account onboarding initiatives. - Perform **CyberArk component upgrades** (PVWA, CPM, PSM, PSMP) and Windows/Linux OS upgrades while ensuring minimal business disruption. - Design and implement secure CyberArk environments with infrastructure hardening and enterprise system integrations. - Troubleshoot and resolve complex infrastructure issues involving Windows, Linux, networking, Active Directory, DNS, firewalls, certificates, and connectivity. - Establish CyberArk platform governance, operational best practices, lifecycle management processes, and secure access models. - Develop architecture blueprints, technical standards, deployment documentation, and implementation best practices. - Collaborate with infrastructure, security, cloud, and application teams to ensure seamless CyberArk adoption and platform stability. - Mentor engineering teams and provide technical leadership during architecture reviews, migrations, upgrades, and critical production incidents. - Implement automation and operational improvements using **PowerShell, Python**, and DevOps practices where applicable. - Stay updated with emerging CyberArk capabilities, cloud security trends, PAM best practices, and enterprise security standards. Bachelor’s or master’s degree in computer science, Information Technology, or a related field.