Maplesoft Group is currently seeking an IAM Architect PAM for our Federal Government client.

Tasks and Responsibilities include, but are not limited to the following:

• Support the design and implementation of PAM architecture for internal applications leveraging 
containerized environments.
• Collaborate with application development and infrastructure teams to deliver highly available credential 
retrieval services using CyberArk Central Credential Provider (CCP) and/or Azure Key Vault.
• Define and document Role-Based Access Control (RBAC) frameworks and integration patterns for 
internally developed applications.
• Assist in the modernization of the client's Privileged Access Management (PAM) platforms, focusing on 
CyberArk (on-premises and Privilege Cloud).
• Analyze the current CyberArk solution environment to identify deficiencies and opportunities for 
simplification, scalability, and alignment with Zero Trust principles.
• Assist with the design and deployment of CyberArk components, including PSM, PVWA, PTA, CPM, 
Vault, and web sessions.
• Support secure authentication integration with Microsoft MFA, FIDO2, and certificate-based methods.
• Provide expertise in session recording, monitoring, and auditing privileged access for compliance 
purposes.
• Assist with migration activities from existing CyberArk on-premises deployments to Privilege Cloud where 
applicable.
• Develop and document repeatable integration patterns and architectural reference models for 
application teams.
• Troubleshoot and resolve complex PAM and IAM issues across cross-functional environments in a timely 
manner.
• Provide knowledge transfer, best practices, and recommendations to strengthen PAM governance and 
operational efficiency.
• Other related activities and deliverables as required.

Required Qualifications & Skills 
The Consultant should have the following qualifications and skills:
• University degree or college diploma in Computer Science, Information Security, or a related field.
• Minimum of ten (10) years of relevant work experience in Identity and Access Management (IAM) with a 
focus on Privileged Access Management.
• Minimum of five (5) years of direct hands-on experience designing, implementing, and operating 
CyberArk Privileged Access Management solutions (on-premises and/or Privilege Cloud).
• Demonstrated expertise with CyberArk components, including Vault, PVWA, CPM, PSM, PTA, CCP, and 
web session management.
• Demonstrated experience with CyberArk migration projects (on-prem to cloud, or multi-tenant 
deployments).
• Demonstrated knowledge of secure authentication methods including SAML. OIDC, FIDO2/WebAuthn, 
and PKI.
• Demonstrated understanding of privileged session recording, monitoring, and compliance requirements.
• Demonstrated ability to design and implement Role-Based Access Control (RBAC) frameworks, 
particularly for internally developed applications.
• Demonstrated technical knowledge of containers (Docker/Kubernetes), networking, and web services 
protocols such as REST and SOAP, as well as API design and integration using JSON/XML.
• Demonstrated expertise to produce clear, concise, and business-ready documentation tailored to 
technical and non-technical audiences.
• Demonstrated strength in analysis and problem-solving, paired with strong negotiation and interpersonal 
communication skills.

Additional Qualifications 
The following will also be considered:
• Demonstrated experience with Agile and DevOps 
• Demonstrated knowledge of Cyber Security certifications (CISSP, GIAC, etc.)
• Demonstrated experience in the banking industry and/or government organizations 
• Experience with identity governance and integration with SailPoint or Microsoft Entra ID



Maplesoft Group prides itself on its distinct corporate culture and recognizes that success is a direct reflection of our most valuable asset - our people.  Therefore, attitude and ambition are key personality traits we seek out, along with skill and aptitude, in potential employees.

Maplesoft Group is committed to having a diverse, representative workforce and continuing to build an inclusive environment. We encourage applications from all qualified individuals. Maplesoft Group is an equal opportunity employer committed to diversity and inclusion. We are pleased to consider all qualified applicants irrespective of race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, protected veterans’ status, Aboriginal peoples or any other legally protected factors. 

All employment decisions are made based on business needs, job requirements, and individual qualifications. 

We are committed to developing inclusive, barrier-free recruitment and selection processes, and a work environment that supports our diverse workforce. Please let us know if you require accommodations at any stage of the recruitment process. We can be reached at Maplesoft Info at info@maplesoftgroup.com.

We thank you for your interest in Maplesoft Group and wish to advise you, that only candidates under consideration will be contacted.