CyberArk Solution Architect

Location: Remote

Description:

Seeking a highly motivated CyberArk Solution Architect to lead the design, planning, and implementation activities required to migrate federal government applications into the CyberArk Privileged Access Management (PAM) platform. This role is responsible for gathering and documenting requirements, analyzing current-state privileged access management processes, identifying privileged and non-privileged accounts requiring migration, and designing secure CyberArk onboarding solutions across multiple enterprise applications.

The architect collaborates with application teams, infrastructure teams, database administrators, cloud engineers, and security stakeholders to define how accounts, credentials, secrets, and access policies will be securely managed within CyberArk. Responsibilities include documenting CyberArk safe design requirements, credential management workflows, account onboarding strategies, application integration requirements, and operational support considerations.

This role requires deep knowledge of CyberArk components including Enterprise Password Vault (EPV), Password Vault Web Access (PVWA), Central Policy Manager (CPM), Privileged Session Manager (PSM), and application credential management capabilities. The architect will also support integration strategies for AWS Secrets Manager and custom application secrets.

The CyberArk Solution Architect will lead technical discovery efforts, facilitate requirements workshops, develop Jira epics and user stories, and provide architectural guidance to implementation teams throughout the project lifecycle. Success in this role requires strong analytical skills, excellent communication abilities, experience supporting federal government environments, and the ability to manage complex technical initiatives across multiple stakeholders. This role will be aligned to Intake 29 CyberArk. This is a 100% Remote role.

Job Responsibilities:

Create solution packages, including solution diagrams, system and technical design docs, web service and API catalogues

Account for data bridging, data migration strategy, and data flow diagrams

Identify gaps or problems; understand business strategy, document technical needs, and develop solutions to meet those needs

Determine the cost implications of various solution options

Develop plans to show how options will work and discussing these with the client in an understandable way

Ensure industry regulation specifications are met

Provide technical advice to clients

Maintain positive working relationships with federal clients, delivery teams, and stakeholders while supporting mission-critical systems.

Provide customer feedback in a timely manner to the production department to ensure that product development or modification meets the clients' needs.

Required Skills and Experience:

Minimum of 5 years of experience designing and implementing enterprise Privileged Access Management (PAM) solutions in large scale federal or regulated environments

Deep hands on expertise with the CyberArk product suite including CyberArk Enterprise Password Vault (EPV), Password Vault Web Access (PVWA), Central Policy Manager (CPM), and Privileged Session Manager (PSM).

Experience integrating CyberArk with cloud platforms, CI/CD Pipelines, and enterprise identity providers

Strong knowledge of federal security frameworks such as Zero Trust, FedRAMP, NIST SP 800-53, and FISMA

Ability to develop architecture blueprints, lead technical teams, and engage with both technical and executive stakehoders

Excellent verbal and written communication skills.

Strong analytical, documentation, and problem-solving skills.

Ability to shift focus between competing priorities in a fast-paced environment.

Demonstrates leadership in the face of ambiguity and works proactively to drive issues to resolution.


Must be able to obtain and maintain a Public Trust clearance

Desired Skills and Experience:

CyberArk (CDE Defender, Sentry, Guardian, or Trustee) certification

Cloud Security certifications

Experience supporting federal government systems or environments.

Experience supporting Public Trust or other federal security compliance requirements.

Experience working in AWS cloud environments.

Familiarity with identity and access management (IAM) and privileged access management (PAM) frameworks.

Experience working within enterprise cybersecurity modernization initiatives.

Experience using Jira and Confluence.

Familiarity with DevSecOps and infrastructure automation practices.

Required Education and Experience:

Bachelor's degree and 6 years of relevant experience; 10+ years of IT experience

Minimum of 5 years designing and implementing enterprise Privileged Access Management (PAM) solutions in large scale federal or regulated environments

#CJ

#dice

About HigherEchelon, Inc.

HigherEchelon, Inc. (HE) is a service-disabled veteran-owned small business (SDVOSB) with offerings in Engineering, Gaming, Human Capital, Enterprise Technology and Cyber Solutions. HigherEchelon aims to be the premier trusted partner in organizational excellence and achieves this through sustained investment in talent and the employee experience. HigherEchelon puts the employee first to better serve customer needs and sustain excellence.

HigherEchelon offers competitive full-time benefits including paid vacation and holidays, 401(k) matching, full health/dental/vision coverage, plus much more. For on-site and remote employees, flexible work schedules are offered when authorized.

By joining our team, you are choosing to embark on a journey towards excellence as a valued team member and trusted partner. We appreciate your inquiry and look forward to discussing the opportunity further.

EOE/Minorities/Females/Veterans/Disabled:

HigherEchelon, Inc. is an Equal Employment Opportunity employer and provides reasonable accommodation for qualified individuals with disabilities and disabled veterans in its job application procedures.

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, genetic information, citizenship, ancestry, marital status, protected veteran status, disability status or any other status protected by federal, state, or local law. HigherEchelon, Inc. participates in E-Verify.