Domain Architect - Identity Management

Job Description

Domain Architect - Identity Management

Jersey City, New Jersey

Job Summary

Years of Experience

• 10+ years of relevant experience in designing, architecting, and implementing PAM and EPM solutions across complex enterprise environments.

General Description

• Serve as the subject matter expert for Privileged Access Management (PAM), providing architecture guidance and best practices across CyberArk and BeyondTrust platforms.
• Partner with business, security, infrastructure, and application teams to assess privileged access risks, define PAM roadmaps, and deliver secure, scalable solutions aligned with organizational objectives.
• Evaluate existing PAM and identity security environments, recommend modernization and optimization strategies, and drive adoption of industry-leading privileged access controls.
• Lead client-facing discussions, workshops, and design reviews with US-based stakeholders, translating business and compliance requirements into effective PAM solutions.
• Provide governance, operational oversight, and lifecycle management for PAM platforms, including continuous improvement, upgrade planning, troubleshooting, documentation, and adherence to security and regulatory standards.

Key Responsibilities

General Description Serve as the subject matter expert for Privileged Access Management (PAM), providing architecture guidance and best practices across CyberArk and BeyondTrust platforms. Partner with business, security, infrastructure, and application teams to assess privileged access risks, define PAM roadmaps, and deliver secure, scalable solutions aligned with organizational objectives. Evaluate existing PAM and identity security environments, recommend modernization and optimization strategies, and drive adoption of industry-leading privileged access controls. Lead client-facing discussions, workshops, and design reviews with US-based stakeholders, translating business and compliance requirements into effective PAM solutions. Provide governance, operational oversight, and lifecycle management for PAM platforms, including continuous improvement, upgrade planning, troubleshooting, documentation, and adherence to security and regulatory standards. Technical Requirements Creating and implementing strategies for managing privileged access using CyberArk and/or BeyondTrust, designing PAM solutions, and ensuring the secure storage, management, and retrieval of sensitive credentials in enterprise environments. Developing and enforcing security policies, access controls, and privileged access management procedures using CyberArk and BeyondTrust capabilities to mitigate security risks and support compliance requirements. Design secure and scalable CyberArk and/or BeyondTrust PAM solutions, creating High-Level Designs (HLDs) and Low-Level Designs (LLDs) for cloud, on-premises, and hybrid environments while working closely with US-based stakeholders. Implement, oversee, and document high-level and low-level designs for CyberArk and BeyondTrust deployments, defining PAM strategies aligned with business, security, and regulatory requirements. Collaborate with automation SPOCs, application teams, and onsite stakeholders to build, test, and optimize PAM-related automation solutions. Design, deploy, and support high-performance, highly available CyberArk and/or BeyondTrust PAM environments with large-scale target endpoints, creating workflows, custom connectors, policies, and integrations. Should be capable of deploying, installing, and configuring CyberArk components (Vault, CPM, PVWA, PSM, PSMP, AIM/CCP) and/or BeyondTrust components (Password Safe, Privileged Remote Access, Endpoint Privilege Management, and related modules) as per client requirements. Develop custom plugins, integrations, and connectors for CyberArk CPM/PSM and BeyondTrust Password Safe/PRA components, as required. Hands-on experience or knowledge in configuring CyberArk PTA, EPM and/or BeyondTrust Endpoint Privilege Management (EPM) and privileged access monitoring capabilities. Integrating various platforms with CyberArk and BeyondTrust, including Windows, UNIX/Linux, databases, network devices, SSH keys, cloud platforms, SAP, and enterprise applications. Creating and managing Safes, platforms, owners, vault policies, asset groups, account management policies, and access controls within CyberArk and/or BeyondTrust environments. Should be familiar with CyberArk Password Upload Utility, PACLI, REST APIs, and corresponding BeyondTrust administration, onboarding, and integration utilities/tools. Experience in integrating CyberArk and BeyondTrust solutions with LDAP/Active Directory, SIEM, SNMP, MFA, and other identity and access management systems. Strong scripting skills using PowerShell, Python, Shell scripting, or APIs to automate tasks, develop integrations, and customize CyberArk and BeyondTrust solutions. Knowledge of regulatory requirements and industry standards related to privileged access management, including NIST, CIS, SOX, PCI-DSS, HIPAA, and GDPR. Experience with security monitoring tools and integrating CyberArk and BeyondTrust with Security Information and Event Management (SIEM) platforms; ability to support client workshops, design discussion

Skill Requirements

Technical Requirements

• Creating and implementing strategies for managing privileged access using CyberArk and/or BeyondTrust, designing PAM solutions, and ensuring the secure storage, management, and retrieval of sensitive credentials in enterprise environments.
• Developing and enforcing security policies, access controls, and privileged access management procedures using CyberArk and BeyondTrust capabilities to mitigate security risks and support compliance requirements.
• Design secure and scalable CyberArk and/or BeyondTrust PAM solutions, creating High-Level Designs (HLDs) and Low-Level Designs (LLDs) for cloud, on-premises, and hybrid environments while working closely with US-based stakeholders.
• Implement, oversee, and document high-level and low-level designs for CyberArk and BeyondTrust deployments, defining PAM strategies aligned with business, security, and regulatory requirements.
• Collaborate with automation SPOCs, application teams, and onsite stakeholders to build, test, and optimize PAM-related automation solutions.
• Design, deploy, and support high-performance, highly available CyberArk and/or BeyondTrust PAM environments with large-scale target endpoints, creating workflows, custom connectors, policies, and integrations.
• Should be capable of deploying, installing, and configuring CyberArk components (Vault, CPM, PVWA, PSM, PSMP, AIM/CCP) and/or BeyondTrust components (Password Safe, Privileged Remote Access, Endpoint Privilege Management, and related modules) as per client requirements.
• Develop custom plugins, integrations, and connectors for CyberArk CPM/PSM and BeyondTrust Password Safe/PRA components, as required.
• Hands-on experience or knowledge in configuring CyberArk PTA, EPM and/or BeyondTrust Endpoint Privilege Management (EPM) and privileged access monitoring capabilities.
• Integrating various platforms with CyberArk and BeyondTrust, including Windows, UNIX/Linux, databases, network devices, SSH keys, cloud platforms, SAP, and enterprise applications.
• Creating and managing Safes, platforms, owners, vault policies, asset groups, account management policies, and access controls within CyberArk and/or BeyondTrust environments.
• Should be familiar with CyberArk Password Upload Utility, PACLI, REST APIs, and corresponding BeyondTrust administration, onboarding, and integration utilities/tools.
• Experience in integrating CyberArk and BeyondTrust solutions with LDAP/Active Directory, SIEM, SNMP, MFA, and other identity and access management systems.
• Strong scripting skills using PowerShell, Python, Shell scripting, or APIs to automate tasks, develop integrations, and customize CyberArk and BeyondTrust solutions.
• Knowledge of regulatory requirements and industry standards related to privileged access management, including NIST, CIS, SOX, PCI-DSS, HIPAA, and GDPR.
• Experience with security monitoring tools and integrating CyberArk and BeyondTrust with Security Information and Event Management (SIEM) platforms; ability to support client workshops, design discussions, and solution reviews in an onsite US-facing environment.

Soft Skills

• Excellent Verbal and written communication skills in English.
• Ability to present solutions to clients in person and remotely if needed.
• Good documentation skills that will enable creation of design documents for the technical solutions proposed.
• Excellent problem-solving skills.
• Good collaboration skills in working with virtual and distributed teams.

Certifications

Good to have relevant PAM certifications such as:

• CyberArk Certified Delivery Engineer (CDE)
• CyberArk Certified Defender (CCD)
• CyberArk Certified Sentry (CCS)
• CyberArk Certified Guardian (CCG)
• BeyondTrust Certified Administrator (BCA)
• BeyondTrust Privileged Access Management Certifications
• CISSP (Certified Information Systems Security Professional)

Educational Qualifications

• University degree in IT or/and IT Security

Other Requirements

Maximum Salary (US):

Minimum Salary (US):

Apply now

Information at a Glance

Why HCLTech?

At HCLTech, youll supercharge your potential. Youll find your career. And youll find your spark. All at a place that knows that helping its customers stay on top starts by putting its people first.

HCLTech is a global technology company, home to more than 223,000 people across 60 countries, delivering industry-leading capabilities centered around digital, engineering, cloud and AI, powered by a broad portfolio of technology services and products. We work with clients across all major verticals, providing industry solutions for Financial Services, Manufacturing, Life Sciences and Healthcare, Technology and Services, Telecom and Media, Retail and CPG, and Public Services. Consolidated revenues as of 12 months ending June 2026 totaled $14.8 billion.

Compensation and Benefits

A candidate's pay within the range will depend on their skills, experience, education, and other factors permitted by law. This role may also be eligible for performance-based bonuses subject to company policies. In addition, this role is eligible for the following benefits subject to company policies: medical, dental, vision, pharmacy, life, accidental death & dismemberment, and disability insurance; employee assistance program; 401(k) retirement plan; 10 days of paid time off per year (some positions are eligible for need-based leave with no designated number of leave days per year); and 10 paid holidays per year.