We are looking for a senior Identity & Access Management (IAM) Architect / Subject Matter Expert with deep expertise in CyberArk Privilege Cloud to design, lead, and optimize enterprise PAM solutions. This role will drive privileged access security, IAM architecture, and integrations across cloud, directory, and governance platforms.
About the Role
We are looking for a senior Identity & Access Management (IAM) Architect / Subject Matter Expert with deep expertise in CyberArk Privilege Cloud to design, lead, and optimize enterprise PAM solutions. This role will drive privileged access security, IAM architecture, and integrations across cloud, directory, and governance platforms.
Key Responsibilities
- Architect, implement, and operate CyberArk Privilege Cloud (PAM) end-to-end, including onboarding, credential rotation, session management, and JIT access.
- Define enterprise PAM architecture, standards, and security best practices aligned with Zero Trust.
- Lead privileged access onboarding for servers, databases, cloud platforms, applications, and service accounts.
- Integrate PAM with IGA platforms (Saviynt preferred), Microsoft Entra ID, ITSM, and SIEM tools.
- Support audits, compliance requirements, and continuous risk reduction.
- Mentor IAM engineers and collaborate with application, cloud, and security teams.
Required Skills & Experience
- 10+ years of experience in Identity & Access Management / PAM.
- Expert-level hands-on experience with CyberArk Privilege Cloud.
- Strong understanding of privileged access security, least privilege, JIT, and session monitoring.
- Experience with Saviynt and Entra ID is desired.
路Ensure solutions meet security, performance, availability, compliance, and cost objectives.
路Produce clear architecture documentation (HLDs, diagrams, principles, decision records).
- Strong architecture mindset with hands-on execution ability.
- Excellent stakeholder communication and leadership skills.
- Security-first thinker with a passion for automation and continuous improvement.
Nice to Have
- CyberArk, Saviynt, or Microsoft security certifications.
- Cloud IAM experience (Azure / AWS / GCP).