PAM Architect with CyberArk (Cybersecurity)

Location: Balkans; flexible remote, hybrid, or onsite work models available. Office locations include Sofia, Plovdiv, Stara Zagora, and Nis.

Company

hirify.global designs, builds, and scales complex software systems for organizations in aerospace and defense, automotive, telecom and media, IT, and financial services.

What you will do

• Design, implement, and own enterprise Privileged Access Management architecture and operations centered on CyberArk.
• Lead deployment and configuration of vaulting, session management, credential rotation, onboarding and offboarding workflows, and privileged access governance.
• Automate the provisioning and lifecycle management of privileged accounts, safes, platforms, and policies using PowerShell, Python, and Bash.
• Integrate CyberArk with identity providers, SSO/MFA, directory services, cloud platforms, DevOps systems, and CI/CD environments.
• Secure machine-to-machine access for application identities, service accounts, APIs, keys, certificates, and secrets across Windows and Linux workloads.
• Define PAM standards, hardening baselines, operational runbooks, monitoring metrics, and continuous improvement practices while providing technical leadership and troubleshooting support.

Requirements

• Bachelor’s or Master’s degree in computer science, cybersecurity, information systems, engineering, or a related technical field.
• 8–12+ years of experience in identity security, PAM engineering, IAM, or security architecture.
• Proven experience designing and implementing CyberArk PAM solutions in enterprise or highly regulated environments.
• Hands-on experience with privileged access across Windows, Linux/Unix, databases, network devices, cloud platforms, and applications.
• Experience integrating PAM with AWS, Azure, GCP, DevOps, and CI/CD environments.
• Ability to advise senior stakeholders and support audits, compliance initiatives, and security risk assessments related to privileged access.

Nice to have

• CyberArk Defender (PAM), CyberArk Sentry, or CyberArk Guardian certification.
• CISSP, CISM, CCSP, Microsoft Entra ID or Azure security certification.
• TOGAF or an equivalent architecture certification.

Culture & Benefits

• Friendly and supportive working environment with strong team collaboration.
• Mentorship, coaching, and access to experienced colleagues.
• Personalized development plan aligned with career aspirations.
• Flexible working hours and a choice of remote, hybrid, or onsite work models.
• Food vouchers, additional health insurance, social events, and team initiatives.