Hybrid PAM Architect

at Teva Pharmaceuticals

• Job title: PAM Architect
• Job type: Full Time
• Experience level: Mid level, Senior
• Salary: Not specified
• Degree requirement: Bachelor's Degree
• Tech skills: Azure, Linux, Vault
• Location requirements: Hybrid, Sofia, Bulgaria

About the role

• PAM Architect managing and enhancing CyberArk PAM solution for Teva Pharmaceuticals. Work involves global access management, high availability, and security compliance.

Responsibilities

• Administer, maintain and develop Teva’s CyberArk PAM solution, including Core PAS, PSM, PVWA, CPM, PTA, PSMP and Akeyless secrets management platform
• Manage and optimize HA and DR deployments across multiple global regions
• Develop and deploy new integrations and automation processes in accordance with security best practices and business requirements
• Monitor system health, apply patches and upgrades, and maintain platform availability and performance
• Onboard accounts, manage safes, policies, and access controls in line with security and regulatory requirements
• Work closely with the Vendor’s Professional Services (PS) and R&D on deployment, upgrades, troubleshooting, and complex integrations
• Collaborate with global infrastructure, application, and security teams to support operational and project needs
• Conduct root cause analysis and resolve incidents and issues
• Support audit, compliance, and validation efforts, ensuring strict adherence to GxP and pharmaceutical industry standards
• Create and maintain standard operating procedures (SOPs), technical documentation, architectural diagrams, and runbooks
• Participate in on-call rotations and support periodic business continuity and DR testing

Requirements

• 5+ years of hands-on experience managing CyberArk PAM and Akeyless in a large, distributed enterprise environment
• CyberArk certification: Defender and Sentry or higher
• Proven experience with CyberArk components: Vault, CPM, PVWA, PSM, PTA, PSMP
• Proven experience including but not limited to: Akeyless secrets management, Dynamic and static secrets, SRA, Universal Secrets Connector
• Knowledge with modern and legacy authentication method (LDAP, Kerberos SAML, OIDC)
• Experience designing and managing HA/DR architecture
• Strong background in Windows and Linux systems, networking, Azure, EntraID, AKS and Active Directory integration
• Proficiency in PowerShell, scripting, and REST API usage for automation and integration tasks
• Demonstrated experience working in a complex enterprise environment with global scope
• Familiarity with audit readiness, access control policies, and regulatory frameworks
• Proven ability to implement role-based access control (RBAC), least-privilege models, and privileged session recording
• Experience with change management procedures, including drafting and submitting RFCs in an ITIL-based environment
• Ability to work collaboratively with cross-functional teams and external vendors across different regions
• Experience working in a regulated pharmaceutical organization with GxP compliance requirements
• Strong analytical and problem-solving skills
• Excellent written and verbal communication in English
• Ability to work independently in a fast-paced, globally distributed environment
• Process-oriented and quality-focused mindset
• High attention to detail, accuracy, and quality

Benefits

• Dynamic and challenging work environment in one of the world leading pharmaceutical company and the biggest pharmaceutical company in Bulgaria
• Competitive remuneration bound with performance
• Additional healthcare insurance
• Transportation allowance and additional flexible benefits
• Flexible working hours and option to work from home as per the company policy
• Opportunity for development