CyberArk (PAM) Architect

About the role

A career in IBM Consulting is built on long-term client relationships and close collaboration worldwide. You’ll work with leading companies across industries, helping them shape their hybrid cloud and AI journeys. With support from strategic partners, robust IBM technology, and Red Hat, you’ll have the tools to drive meaningful change and accelerate client impact. At IBM Consulting, curiosity fuels success—you’ll be encouraged to challenge the norm, explore new ideas, and create innovative solutions that deliver real results. Our culture of growth and empathy focuses on your long-term career development while valuing your unique skills and experiences.

Responsibilities

• Design and implement CyberArk PAM architectures aligned with business and security requirements.
• Lead CyberArk deployments, upgrades, migrations, and platform hardening activities.
• Configure safes, platforms, account onboarding, password rotation, and session management policies.
• Integrate CyberArk with Active Directory, SIEM, MFA, ServiceNow, and cloud services.
• Develop security standards, operational procedures, and PAM governance models.
• Conduct risk assessments and recommend privileged access controls based on Zero Trust principles.
• Provide L3 support, troubleshooting, performance tuning, and capacity planning.
• Collaborate with security, infrastructure, cloud, and application teams to secure privileged accounts and secrets.

CyberArk PAM Suite Architecture and Design

• Privileged Access Security & Identity Governance
• CyberArk PAS Components:
  • Digital Vault
  • Privileged Vault Web Access (PVWA)
  • Central Policy Manager (CPM)
  • Privileged Session Manager (PSM)
  • Privileged Threat Analytics (PTA)
  • Enterprise Secret Manager (Conjur)
  • Credential Providers (CP)
• CyberArk SaaS and Self-Hosted Deployments
• Discovery and Onboarding of Privileged Accounts
• Session Monitoring, Recording, and Auditing
• Password Management and Rotation
• Secrets Management & DevSecOps Integration
• Zero Trust and Least Privilege Implementation
• Access Certification and Compliance Management
• High Availability, Disaster Recovery, and Migration Strategies
• Secrets Manager (Conjur)

Compliance & Security Frameworks

• NIST Cybersecurity Framework
• CIS Controls
• ISO 27001
• SOX
• PCI-DSS
• HIPAA
• GDPR
• Zero Trust Security Architecture

Requirements

• 10+ years of Information Security experience and 5+ years specializing in CyberArk Privileged Access Management solutions
• Experience with operating systems such as: Windows Server, Linux, Unix
• Cloud Platforms: Azure, AWS, Google Cloud Platform
• Directory Services: Active Directory, LDAP, Entra ID (Azure AD)
• SIEM Integration: Splunk, QRadar, ArcSight, Sentinel
• Ticketing & ITSM: ServiceNow, Remedy
• Automation/Scripting: PowerShell, Python, REST APIs
• DevOps Tools: Jenkins, Kubernetes, Docker, OpenShift
• Databases: SQL Server, Oracle, PostgreSQL

Preferred Education: Master's Degree