Associate Principal Engineer PAM System Architect (CyberArk Architect)

We are a Digital Product Engineering company that is scaling in a big way! We build products, services, and experiences that inspire, excite, and delight. We work at scale across all devices and digital mediums, and our people exist everywhere in the world (18500+ experts across 40 countries, to be exact). Our work culture is dynamic and non-hierarchical. We're looking for great new colleagues. That's where you come in!

REQUIREMENTS:

• Total experience: 9+ years.
• Strong hands-on experience with CyberArk Privileged Access Security (PAS) architecture, implementation, and administration.
• Must-have expertise in CyberArk Vault architecture, migrations, and enterprise PAM solution design.
• Strong experience performing CyberArk component upgrades, including PVWA, CPM, PSM, and PSMP, along with Windows and Linux OS upgrades.
• Hands-on experience designing high-availability, disaster recovery, and multi-site CyberArk deployments.
• Strong knowledge of Windows, Linux, Active Directory, DNS, networking, firewalls, load balancers, and SSL/TLS certificate management.
• Experience executing large-scale CyberArk migrations, including account onboarding, credential migration, and environment consolidation.
• Strong expertise in platform governance, secure hardening, lifecycle management, and privileged access operational best practices.
• Experience diagnosing and resolving complex infrastructure, platform, and connectivity issues across enterprise environments.
• Strong experience creating CyberArk architecture standards, technical documentation, and deployment blueprints.
• Good-to-have CyberArk CDE certification.
• Good-to-have experience with AWS, Azure, or GCP, PowerShell/Python scripting, and DevOps pipelines with secrets management.
• Strong leadership, stakeholder management, analytical, problem-solving, mentoring, and communication skills.

RESPONSIBILITIES:

• Lead the architecture, design, and implementation of enterprise CyberArk Privileged Access Management (PAM) solutions.
• Design scalable, secure, and highly available CyberArk Vault architectures, including disaster recovery and multi-site deployments.
• Execute CyberArk Vault migrations, platform consolidations, and enterprise-wide account onboarding initiatives.
• Perform CyberArk component upgrades (PVWA, CPM, PSM, PSMP) and Windows/Linux OS upgrades while ensuring minimal business disruption.
• Design and implement secure CyberArk environments with infrastructure hardening and enterprise system integrations.
• Troubleshoot and resolve complex infrastructure issues involving Windows, Linux, networking, Active Directory, DNS, firewalls, certificates, and connectivity.
• Establish CyberArk platform governance, operational best practices, lifecycle management processes, and secure access models.
• Develop architecture blueprints, technical standards, deployment documentation, and implementation best practices.
• Collaborate with infrastructure, security, cloud, and application teams to ensure seamless CyberArk adoption and platform stability.
• Mentor engineering teams and provide technical leadership during architecture reviews, migrations, upgrades, and critical production incidents.
• Implement automation and operational improvements using PowerShell, Python, and DevOps practices where applicable.
• Stay updated with emerging CyberArk capabilities, cloud security trends, PAM best practices, and enterprise security standards.

Bachelor’s or master’s degree in computer science, Information Technology, or a related field.