PAM/CyberArk Engineer

Location: Chandler, New York, Dallas, San Francisco, Charlotte, Raleigh, Minneapolis, Columbus

Job Overview

They are seeking a hands-on Information Security Engineer with strong expertise in Identity and Access Management (IAM) and CyberArk Privileged Access Management (PAM). This role is part of the production support team, responsible for managing and supporting critical enterprise security applications, ensuring high availability, and responding to incidents in a fast-paced environment.

Key Responsibilities

• Provide production support for CyberArk and IAM platforms
• Perform onboarding, provisioning, and de-provisioning of privileged accounts
• Manage CyberArk components, including troubleshooting, upgrades, and integrations
• Support privileged access lifecycle processes
• Handle incident management and resolve production issues (user access, password rotation, system outages)
• Manage change requests through full lifecycle (analysis → implementation → validation)
• Work with ServiceNow for ticketing and SLA management
• Develop and maintain automation scripts (PowerShell, Python, REST APIs)
• Support additional internal applications such as:
  • Automated Password Reset Portal
  • Enterprise Break Glass (Windows)
• Participate in on-call rotation to support critical systems
• Collaborate with global teams (US & offshore)

Required Qualifications

• 5 years of experience in:
  • Information Security
  • Identity & Access Management (IAM)
• Strong hands-on experience with CyberArk (mandatory):
  • Installation, configuration, and upgrades
  • Troubleshooting production issues
  • Account onboarding (privileged accounts)
• Experience in privileged access management (PAM) platforms
• Solid understanding of:
  • IAM concepts
  • Access lifecycle (provisioning, deprovisioning)
  • Security controls and compliance
• Experience supporting operational environments with SLAs
• Scripting experience:
  • PowerShell
  • Python
  • REST APIs

Preferred Qualifications

• Experience with:
  • Active Directory (AD)
  • Federation tools (e.g., Ping, Okta)
• Familiarity with automation in IAM/PAM environments
• Experience with enterprise-scale security systems

On-Call Requirement

• Participation in on-call rotation every 4–6 weeks
• On-call window: 7:00 AM – 7:00 PM (Central/Eastern)
• Coverage includes weekdays and weekends during rotation
• Must respond to alerts/emails within 15–20 minutes
• Support highly critical, enterprise-level applications