The Senior Cybersecurity Architect will be responsible for designing, implementing, and maintaining enterprise Privileged Access Management (PAM) solutions, with a primary focus on CyberArk technologies. This role will lead the architecture of secure identity and secrets management platforms across on-premises and cloud environments, ensuring privileged access controls align with security best practices, regulatory requirements, and business objectives.

Key Responsibilities

Define and maintain the enterprise architecture for CyberArk solutions, including Vault, CPM, PSM, PVWA, Privileged Threat Analytics, and Conjur.
Design privileged access controls based on least privilege, separation of duties, and time-bound access principles.
Architect and implement CyberArk solutions across Windows, Linux, UNIX, databases, and cloud environments (AWS, Azure, and GCP).
Lead the design and implementation of CyberArk Conjur, including policy-as-code, secret lifecycle automation, dynamic secrets, and Kubernetes integrations.
Manage the complete secrets lifecycle, including password rotation, SSH key management, API credential vaulting, and secure credential retrieval.
Ensure the availability and resilience of PAM platforms through monitoring, automated remediation, incident response, and disaster recovery planning.
Partner with engineering, infrastructure, cloud, and application teams to integrate privileged access controls into new platforms, migrations, and system upgrades.
Embed PAM and secrets management capabilities into CI/CD pipelines and cloud-native workloads.
Automate CyberArk operations using PowerShell, Python, and CyberArk REST APIs for account onboarding, offboarding, password rotation, and reporting.
Review privileged session recordings, analytics, and threat intelligence to support risk-based security decisions.
Evaluate emerging PAM and identity security technologies, providing architecture recommendations and business cases for adoption.
Provide senior technical guidance during security incidents and communicate architecture decisions, risks, and recommendations to technical teams, business stakeholders, and senior management.

Your profile

Bachelor's degree in Computer Science, Information Security, Engineering, or a related discipline. A Master's degree is an advantage.
7–10 years of experience in Cybersecurity, Identity Security, or Privileged Access Management.
Strong hands-on experience architecting, implementing, and operating CyberArk Privileged Access Security solutions at enterprise scale.
Advanced knowledge of CyberArk components, including Vault, CPM, PSM, PVWA, and Privileged Threat Analytics.
Expertise in CyberArk Conjur, including policy-as-code, secret rotation and lifecycle management, dynamic secrets, Kubernetes sidecar or container-based secret injection, and API/CLI integrations.
Strong understanding of Windows, Linux, and UNIX authentication mechanisms.
Knowledge of Active Directory, LDAP, Kerberos, SSH, and database authentication.
Experience integrating CyberArk with identity providers and Single Sign-On (SSO) solutions using SAML, OIDC, or Active Directory.
Proficiency in PowerShell, Python, and REST API-based automation.
Experience with AWS Secrets Manager, Azure Key Vault, or other cloud secrets management platforms.
Understanding of hybrid identity environments and Zero Trust principles for privileged access.
Experience designing highly available identity platforms with monitoring and disaster recovery procedures.
Excellent communication, stakeholder management, and influencing skills, with the ability to collaborate effectively across business, security, infrastructure, and application teams in a multinational environment.

What We Offer

An international community, bringing together 110+ different nationalities
An environment where trust has a central place: 70% of our key leaders started their careers at the first level of responsibilities
A robust training system with our internal Academy and 250+ available modules
A vibrant workplace that frequently gathers for internal events (afterworks, team buildings, etc.)
At Mantu, sustainability is part of everything we do. You'll have the opportunity to turn your ideas into action and make a tangible impact. Every day, our teams bring our ESG commitments to life, from reducing our footprint to driving positive change within our communities. Through our WeCare Together program, you'll be empowered to design and lead projects that create real social or environmental impact, with the company's full support.

Amaris Consulting is proud to be an equal-opportunity workplace. We are committed to promoting diversity within the workforce and creating an inclusive working environment. For this purpose, we welcome applications from all qualified candidates regardless of gender, sexual orientation, race, ethnicity, beliefs, age, marital status, disability, or other characteristics.

Senior Cybersecurity Architect CyberArk / PAM