Cybersecurity Architect (Cyberark)

Responsibilities:

• Define and own the enterprise‑wide CyberArk architecture (Vault, CPM, PSM, PVWA, Conjur, ) to support the banks technical accounts inventory.

• Design and enforce privileged‑access policies (least‑privilege, separation‑of‑duties, time‑bound access) across Windows, Linux, UNIX, databases, cloud platforms (AWS, Azure, GCP)

• 3. Provide high-availability support for the CyberArk, establishing robust monitoring, incident-response, and disaster-recovery processes that keep critical services up and running 24×7.

• Drive the secret‑management lifecycle – automatic password rotation, SSH key management, API‑credential vaulting, and on‑demand retrieval.

• Partner with engineering, application, and cloud teams to embed secure identity controls into every new service launch, migration, or platform upgrade.

•  Automate PAM processes using PowerShell, Python, and CyberArk REST APIs (e.g., bulk onboarding/off‑boarding, credential rotation schedules).

• Evaluate emerging PAM technologies (e.g., CyberArk Conjur, Secret-Zero, Zero-Trust Privilege) and build business cases for adoption.

• Collaborate with DevSecOps, Cloud, and Application teams to embed privileged-access controls into CI/CD pipelines and cloud-native workload

Requirements: 

• Requires a minimum of 8+ years of experience as security professional

• Bachelor’s degree in Computer Science, Information Security, or related field (Master’s ).

• Hands-on experience architecting, deploying, and operating CyberArk PAS (Vault, CPM, PSM, PVWA) at enterprise scale.

• Conjur (CyberArk) – L3 – policy-as-code (CPL/HCL), secret rotation, dynamic secrets, Kubernetes side-car injection, API/CLI integrations

• Deep expertise in CyberArk Core PAS components and CyberArk Privileged Threat Analytics.

• Strong knowledge of Windows/UNIX/Linux authentication mechanisms, Kerberos, LDAP/AD, SSH, database authentication.

• Experience integrating CyberArk with SSO/IdP solutions (SAML, OIDC, AD).

• Proficiency in PowerShell, Python, and CyberArk REST API for automation.

• Familiarity with cloud providers (AWS Secrets Manager, Azure Key Vault) and Hybrid‑IAM environments.

• Solid understanding of Zero‑Trust concepts for privileged access.

• Excellent interpersonal and communication skills; ability to influence and motivate

• Leverage PAM analytics (session recordings, anomaly scores) to drive risk-based decisions

• Ability to handle high pressure situations with key stakeholders to collaborate and communicate effectively and respectfully with both business-oriented executives and technology-oriented personnel in teams across the organization

Specific qualifications:

• CyberArk Certified Defender (CCD)

• Secrets Manager (Conjur) certified

•Work-life balance: Hybrid working mode and 18 days of Annual leave

•Health & insurance: Comprehensive coverage including General Practitioner, hospitalization, dental, and optical

•Performance incentives: Annual bonus based on individual performance

•Learning & development: Training programs, certification opportunities, and training incentives to support career growth

•Team culture: Regular team-building activities and social events