CyberArk PAM Architect

Contract: 12 months (subject to extension).

Location: Amsterdam, Netherlands.

Salary: Not a constraint for the right candidate!

Experience: 8-10 years.

Hybrid: 2 days Work from Home 3 days Work from Office

Your Profile & DNA:

We are seeking an experienced CyberArk PAM Architect to design, implement, and support enterprise-wide Privileged Access Management (PAM) solutions using the CyberArk platform. The ideal candidate will have deep expertise in CyberArk architecture, privileged account governance, identity security, secrets management, and enterprise integrations to strengthen the organization's cybersecurity posture.

Roles & Responsibilities

Architecture & Solution Design

• Design and develop scalable, secure, and highly available CyberArk PAM architectures aligned with business and security requirements.
• Define the organization's PAM strategy, roadmap, architecture standards, and best practices.
• Conduct security assessments and recommend improvements to privileged access management controls.
• Design solutions that support Zero Trust and least-privilege security models.

CyberArk Implementation & Administration

• Lead the deployment, configuration, upgrade, and administration of CyberArk components, including:
• Digital Vault
• Privileged Session Manager (PSM)
• Central Policy Manager (CPM)
• Password Vault Web Access (PVWA)

Searching for Devops roles that provide visa sponsorship? Connect with international employers through Devops Jobs with Visa Sponsorship opportunities actively seeking talented professionals.

• Privileged Threat Analytics (PTA)
• CyberArk Identity
• Conjur Secrets Manager
• Configure Safes, Platforms, Account Groups, access policies, and privileged account onboarding.
• Manage privileged credential lifecycle, password rotation, session management, and access controls.

Integration & Automation

• Integrate CyberArk with enterprise platforms, including:
• Microsoft Active Directory
• Microsoft Entra ID (Azure AD)
• LDAP
• ServiceNow
• SIEM platforms (Microsoft Sentinel, Splunk, QRadar)
• Cloud platforms (AWS, Azure, GCP)
• Develop automation using REST APIs, PowerShell, Python, and Ansible.
• Implement application credential management and enterprise secrets management solutions.

Governance, Risk & Compliance

• Ensure PAM solutions align with security frameworks and regulatory requirements, including:
• ISO 27001
• NIST
• SOC 2

Explore our comprehensive directory of visa sponsorship jobs from employers worldwide who are ready to sponsor talented international professionals.

• PCI-DSS
• CIS Controls
• Conduct privileged access reviews, account audits, and compliance assessments.
• Enforce governance standards, least-privilege access, and Zero Trust principles.

Operational Support

• Provide Level 3 support for CyberArk-related incidents and complex technical issues.
• Perform troubleshooting, root cause analysis, and performance optimization.
• Develop technical documentation, architecture diagrams, operational procedures, and runbooks.
• Mentor junior PAM engineers and provide technical guidance to security and infrastructure teams.

Qualification & Experience

• Bachelor's degree in Computer Science, Information Security, Information Technology, or a related field.
• Extensive experience designing and implementing CyberArk Privileged Access Management (PAM) solutions.
• Strong expertise across CyberArk components, including Digital Vault, PSM, CPM, PVWA, PTA, CyberArk Identity, and Conjur.
• Experience integrating CyberArk with Active Directory, Microsoft Entra ID (Azure AD), LDAP, ServiceNow, SIEM platforms, and cloud environments.
• Strong understanding of privileged identity management, identity security, authentication, authorization, and secrets management.
• Experience with scripting and automation using PowerShell, Python, REST APIs, or Ansible.
• Excellent troubleshooting, analytical, and problem-solving skills.
• Strong communication, documentation, and stakeholder management skills.

Interested in opportunities specifically in Netherlands? Discover our dedicated Visa Sponsorship Jobs in Netherlands page featuring roles from top employers in this location.

Preferred Qualifications

• CyberArk certifications (Defender, Sentry, or Guardian).
• Cloud certifications (Microsoft Azure, AWS, or Google Cloud).
• Experience implementing Zero Trust security architectures.
• Familiarity with DevSecOps, CI/CD pipelines, and Kubernetes secrets management.
• Knowledge of enterprise identity platforms and security technologies.

What do we offer?

If your profile matches the job requirement and you are interested to be presented to our clients, then please apply and don’t forget to attach your updated CV in line with the JD!

This position is for 1 year with possibility of extension. We offer competitive Gross Salary in line with the market standard.

Besides that, we offer following benefits, such as:

• 20 days of holiday per year
• Encourage Personal Development - Certification (Certification Charges reimbursed)
• Income Tax Return Filing
• We provide Visa Sponsorship for Candidate & Dependants
• Possibility of bonus

Who we are:

A2G Consulting also known as "A2G Technologies" is one of the fastest growing staffing companies in North Brabant region, Netherlands. We cater to Asia and Europe market focusing on high tech & non-high-tech clientele; headquartered in Eindhoven, Netherlands with a branch office in India (Bangalore & Pune) & Dubai. We successfully find a candidate and ensure that they get opportunities in line with their aspirations. We offer visa sponsorship for local & international candidates for career-enhancing opportunities. We strongly believe in equal opportunities and hence have a pool of resources with diversified ethnicity.

You will be deployed and work at one of our client sites.