CyberArk Architect

🕒 September 11

🇬🇧 United Kingdom – Remote

⏳ Contract/Temporary

🟠 Senior

🔴 Lead

🏛️ Architect

👻 Ghost score 17%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Bounteous

WebsiteLinkedInAll Job Openings

501 - 1000 employees

Founded 2003

💼 Consulting

🏥 Healthcare

📣 Marketing

💰 Private Equity Round on 2021-08

Consulting • Healthcare • Marketing

Bounteous is a digital solutions firm known for its co-innovation model, which assists leading brands in navigating digital transformations and enhancing user experiences. The company partners with businesses from various sectors such as financial services, healthcare, telecommunications, retail, and convenience, to deliver data-driven solutions. Bounteous offers expertise in areas including artificial intelligence, data analytics, digital commerce, and cloud enablement, helping its clients harness technology for sustained growth and brand loyalty. With a global presence, Bounteous is dedicated to creating personalized and effective digital strategies that drive business success.

📋 Description

• Lead solution design for a large-scale, TSA-regulated Privileged Access Management migration and merger consolidation programme • Design end-to-end migration architecture from CyberArk v12.2 to v14.2 • Define staged ingestion, credential protection, name-collision resolution, platform normalisation, and policy reconciliation • Produce migration runbooks, RAID logs, and effort-sizing models • Segment 250+ dependent applications by integration pattern and lead CP/CCP re-onboarding • Design AppID re-provisioning, certificate/mTLS re-issuance, phased cutover waves, rollback, and dual-run strategies • Design PVWA federation to Entra ID via SAML/OIDC and map Entra groups to CyberArk Vault Users and Safe membership • Architect RSA SecurID to Entra MFA migration, including Conditional Access and legacy client bridging • Preserve High Side / Low Side segregation across federation and migration data flows • Own architecture decisions, trade-offs, audit evidence, tooling evaluation, acceptance criteria, and go/no-go gates • Present designs to client security, compliance, and PAM leadership • Mentor and provide technical direction to CyberArk Senior Engineers

🎯 Requirements

• 10+ years in Identity and Access Management • 5+ years specifically in CyberArk PAM architecture and design • Deep hands-on knowledge of CyberArk EPV, PVWA, CPM, PSM, AAM/CCP, and Vault architecture across on-prem and Privilege Cloud deployments • Proven experience leading a CyberArk version migration (v10/v11/v12 → v13/v14) at enterprise scale • Strong working knowledge of SAML 2.0 and OIDC federation design • Experience integrating CyberArk PVWA with an enterprise IdP (Entra ID, Okta, or equivalent) • Experience with credential provider architectures (CP, CCP) and application onboarding at scale (100+ application estates) • Familiarity with MFA migration projects, such as RSA SecurID to a cloud MFA/Conditional Access model • Experience operating in regulated environments with formal change control and audit evidence requirements • Strong client-facing communication skills; able to present architecture to both technical and executive stakeholders

🏖️ Benefits

• Eligible candidates may be sponsored for employment visas • Remote work arrangement