Domain Architect - OKTA, CyberArk PAM

Job Description

Domain Architect - OKTA, CyberArk PAM

Others, California

Job Summary

experienced CyberArk Endpoint Privilege Manager (EPM) Architect with deep technical expertise in designing, deploying, and migrating enterprise EPM environments. The ideal candidate will lead large-scale implementations, architect scalable privilege management solutions, and drive seamless migrations between CyberArk EPM tenants while minimizing business impact.

Key Responsibilities

Architect, deploy, and configure CyberArk EPM across enterprise Windows and macOS environments. • Lead end-to-end migration of CyberArk EPM policies, configurations, application groups, and rule sets from one environment/tenant to another. • Design and implement application control, privilege elevation, and least privilege strategies. • Develop, optimize, and troubleshoot EPM policies, trusted applications, and elevation rules. • Integrate CyberArk EPM with enterprise identity, security, and endpoint management platforms (Microsoft Intune, MECM/SCCM, SentinelOne, SIEM, etc.). • Automate deployment, policy management, and migration activities using PowerShell and REST APIs. • Perform architecture reviews, health assessments, and recommend best practices for performance, scalability, and security. • Collaborate with security, infrastructure, desktop engineering, and application teams throughout implementation and migration projects. • Create technical documentation, migration runbooks, and operational procedures. • Provide Level 3/4 technical support and mentor engineering teams.

Skill Requirements

• years of endpoint security experience with 4+ years of hands-on CyberArk EPM architecture and implementation. • Proven experience deploying CyberArk EPM in large enterprise environments. • Strong experience migrating CyberArk EPM from one tenant/environment to another, including policy and configuration migration. • Deep understanding of application control, privilege management, allow/block rules, elevation policies, and sub-process elevation. • Strong PowerShell scripting and API automation experience. • Experience with Microsoft Intune, MECM/SCCM, Active Directory, Entra ID, Windows security, and endpoint management. • Strong troubleshooting, communication, documentation, and stakeholder management skills.

Other Requirements

CyberArk certifications (EPM, Defender, Sentry, or Guardian). • Experience with enterprise transformation, Zero Trust, and Privileged Access Management (PAM) initiatives. • Experience integrating EPM with SIEM, EDR/XDR, and ITSM platforms.

Maximum Salary (US):

Minimum Salary (US):

Apply now

Information at a Glance

Why HCLTech?

At HCLTech, youll supercharge your potential. Youll find your career. And youll find your spark. All at a place that knows that helping its customers stay on top starts by putting its people first.

HCLTech is a global technology company, home to more than 223,000 people across 60 countries, delivering industry-leading capabilities centered around digital, engineering, cloud and AI, powered by a broad portfolio of technology services and products. We work with clients across all major verticals, providing industry solutions for Financial Services, Manufacturing, Life Sciences and Healthcare, Technology and Services, Telecom and Media, Retail and CPG, and Public Services. Consolidated revenues as of 12 months ending June 2026 totaled $14.8 billion.

Compensation and Benefits

A candidate's pay within the range will depend on their skills, experience, education, and other factors permitted by law. This role may also be eligible for performance-based bonuses subject to company policies. In addition, this role is eligible for the following benefits subject to company policies: medical, dental, vision, pharmacy, life, accidental death & dismemberment, and disability insurance; employee assistance program; 401(k) retirement plan; 10 days of paid time off per year (some positions are eligible for need-based leave with no designated number of leave days per year); and 10 paid holidays per year.