Technology Architect | Identity Management | Privileged User Management

Job Title

About the role

The successful candidate will be leading a large-scale CyberArk-to-Delinea migration program for a global technology client. The architect will own solution design, migration strategy, integration architecture, stakeholder management, and technical governance across privileged account migration, session management, password rotation, DevOps secrets modernization, and enterprise integrations.

Responsibilities

• Lead architecture and design for Delinea Secret Server, Connection Manager, and DevOps Secrets Vault.
• Define CyberArk-to-Delinea migration strategy, wave planning, cutover, and rollback approach.
• Design Safe-to-Folder mapping, RBAC model, password rotation, session recording, and access workflows.
• Drive integrations with AD/LDAP, RADIUS, SailPoint/Saviyant, ServiceNow, Splunk, ArcSight, Okta, and Entra ID.
• Provide technical leadership to offshore Delinea and automation teams.
• Conduct architecture reviews, risk assessments, and executive/client workshops.
• Cookordination with client PAM teams and Delinea Professional Services throughout the transformation lifecycle.

Requirements

• Minimum years of experience required: 12+ Years (8+ Years in PAM, 5+ Years in Delinea)
• Must Have Skills: Lead architecture and design for Delinea Secret Server, Connection Manager, and DevOps Secrets Vault. Define CyberArk-to-Delinea migration strategy, wave planning, cutover, and rollback approach. Design Safe-to-Folder mapping, RBAC model, password rotation, session recording, and access workflows. Drive integrations with AD/LDAP, RADIUS, SailPoint/Saviyant, ServiceNow, Splunk, ArcSight, Okta, and Entra ID. Provide technical leadership to offshore Delinea and automation teams. Conduct architecture reviews, risk assessments, and executive/client workshops. Coordinate with client PAM teams and Delinea Professional Services throughout the transformation lifecycle

Nice to have skills

• Delinea Secret Server (Cloud & On-Prem)
• Delinea DSV, Connection Manager, Discovery Engine
• CyberArk Client, CPM, PSM, PSMP, AIM/AAM, Conjur
• PAM migrations and platform transformations
• SSO, SAML, OAuth, OIDC, LDAP, RADIUS, SCIM
• ServiceNow, SailPoint/Saviyant, SIEM integrations
• REST APIs, PowerShell, automation and scripting
• Azure, AWS, Kubernetes, DevOps Secrets Management
• Custom Fields: Name: Intake Call Completed Value: true
  Name: Intake Call Requested Value: true