CyberArk Architect

Migration & Vault Architecture:

• Design the full migration architecture from CyberArk v12.2 to v14.2 using REST API and PACLI for entity extraction, transformation, and staged loading.
• Define the staged-ingestion model: disabled import → CPM soft-verification → dual-run mirroring → forced rotation at cutover.
• Own name-collision resolution, platform normalisation, and policy reconciliation rules between source and target.

Application & Credential Provider Strategy:

• Lead discovery to segment 250+ dependent applications by integration pattern (CP agent, CCP centralised, Conjur, direct SSO) to sequence onboarding.
• Design CP/CCP re-onboarding with AppID reprovisioning, certificate/mTLS reissuance, and phased cutover waves inclusive of rollback.

Identity Federation & MFA:

• Design PVWA federation to Entra ID via SAML/OIDC with claims mapping from Entra groups to Vault Users and Safe membership.
• Architect RSA SecurID to Entra MFA migration as a re-enrolment exercise covering Conditional Access policy and legacy client bridging.

Governance, Compliance & Stakeholder Leadership:

• Present architecture designs to client security, compliance, and PAM leadership for sign-off and ensure audit evidence for TS compliance.
• Evaluate complementary tooling (e.g. Hydden) and define accepance criteria for pilot and production wave approval.n- Mentor Senior Engineers and provide technical direction.