Cyberark Architect - PAM Migration Programme

🚨 CyberArk Architect – PAM Migration Programme 📍 Hybrid – 2–3 days onsite 💷 c. £600-£650/day Inside IR35 📆 6-month initial contract / long-term programme ⚡ ASAP start – ideally within 3 weeks I'm recruiting for a senior CyberArk Architect to take the technical lead on a major enterprise PAM migration and consolidation programme. This is not a purely hands-on CyberArk engineering role. The successful person will initially own the architecture and migration strategy, working directly with senior client stakeholders, before helping shape and provide technical direction to the wider engineering team. The programme You'll be leading a large-scale migration from CyberArk v12.2 to v14.2, supporting an enterprise environment with thousands of privileged accounts and 250+ dependent applications. Key responsibilities will include: 🔹 Owning the CyberArk migration architecture, design decisions and technical roadmap 🔹 Leading migration across EPV, PVWA, CPM, PSM, AAM / CCP 🔹 Designing CP / CCP application onboarding and migration at scale 🔹 Driving automation through REST APIs 🔹 Designing SAML / OIDC federation and Entra ID integration 🔹 Supporting migration from RSA SecurID to Entra MFA 🔹 Defining application segmentation, phased cutovers and go/no-go decisions 🔹 Producing architecture documentation, migration runbooks and governance controls 🔹 Presenting architecture decisions and trade-offs to senior security, compliance and technology stakeholders 🔹 Providing technical leadership and direction to CyberArk engineers throughout delivery What I'm looking for Ideally, you'll bring: ✅ Strong background across IAM / PAM architecture ✅ 5+ years working specifically with CyberArk architecture and design ✅ Experience leading a major CyberArk migration, upgrade or transformation ✅ Strong knowledge of SAML 2.0, federation and Entra ID ✅ Experience with REST APIs, CP / CCP and large-scale application onboarding ✅ Background working within complex or regulated enterprise environments ✅ Strong client-facing and stakeholder-management capability ✅ Experience leading, mentoring or technically directing engineering teams The key differentiator here is leadership. Previous candidates have had strong CyberArk technical skills but lacked the ability to confidently own architecture decisions, challenge stakeholders and lead delivery in front of the client. If you've personally owned the architecture, presented the solution to senior stakeholders and directed the engineers delivering a CyberArk transformation, please apply below for an urgent call to discuss.