Role: CyberArk Architect Location: Remote – US Duration: 12 Months Job Description: We are seeking a Senior CyberArk Architect / PAM Engineer with 5–8+ years of hands-on CyberArk experience to assess, design, implement, and optimize enterprise CyberArk PAM and Cloud/SaaS environments. The candidate will evaluate the current PAM landscape, identify security and operational gaps, define the target architecture, and develop a prioritized implementation roadmap. Key Responsibilities: Assess existing CyberArk architecture, configuration, policies, integrations, account onboarding, password rotation, session management, and platform health. Develop current-state assessments, gap analysis, target-state architecture, PAM maturity plans, and implementation roadmaps. Implement and optimize CyberArk PAM, Cloud/SaaS, CPM, PSM/PSMP, SIA, JIT privileged access, and secrets management. Manage onboarding of privileged accounts, applications, databases, service accounts, APIs, cloud platforms, Windows/Linux systems, and network devices. Configure password rotation, verification, reconciliation, privileged session access, monitoring, and recording. Design and implement CyberArk Secure Infrastructure Access (SIA) and Just-in-Time (JIT) access to reduce standing privileges and credential exposure. Lead CyberArk Endpoint Privilege Manager (EPM) architecture, policy development, application control, privilege elevation, agent deployment, phased rollout, troubleshooting, exception management, and optimization. Integrate CyberArk with IAM/identity providers, AWS/Azure/Google Cloud Platform, ITSM, SIEM, applications, DevOps/CI/CD, and monitoring platforms. Develop automation using PowerShell, Python, REST APIs, and CyberArk capabilities. Establish PAM standards, SOPs, runbooks, governance, account lifecycle processes, and operational procedures. Collaborate with IAM, security, infrastructure, cloud, application, and business teams and provide knowledge transfer. Required Skills: CyberArk PAM, CyberArk Cloud/SaaS, CPM, PSM, PSMP, SIA, EPM, JIT Privileged Access, Privileged Account Management, Password Rotation/Reconciliation, Session Management, Secrets Management, Application & Service Account Onboarding, Windows/Linux, REST APIs, PowerShell, Python, IAM Integration, Cloud Integration, PAM Architecture & Assessment. Preferred: PTA, AWS/Azure/Google Cloud Platform, Kubernetes, DevOps/CI/CD, ITSM/SIEM integrations, CyberArk Defender/Sentry certifications, CISSP. Key Deliverables: Current-state assessment, PAM gap/maturity analysis, target-state architecture, CyberArk Cloud strategy, SIA/JIT strategy, EPM deployment and policy strategy, onboarding framework, integration plan, remediation roadmap, PAM standards/runbooks, and knowledge-transfer documentation.