PAM Engineer

Must Have Technical/Functional Skills

• 8+ years of experience in Cyber Security with at least 3+ years of CyberArk administration experience.
• Strong hands-on experience with:
• CyberArk Vault
• PVWA (Password Vault Web Access)
• CPM (Central Policy Manager)
• PSM (Privileged Session Manager)
• PTA (Privileged Threat Analytics)
• EPM (Endpoint Privilege Manager)
• Experience with Windows and Linux server administration.
• Understanding of Identity & Access Management (IAM) concepts.
• Experience integrating CyberArk with Active Directory and MFA solutions.
• Knowledge of password management, privileged account governance, and security best practices.
• Experience with PowerShell, Python, or scripting for automation.
• Strong troubleshooting and stakeholder management skills.

Roles & Responsibilities
We are seeking an experienced CyberArk PAM Engineer to design, implement, administer, and support Privileged Access Management solutions across enterprise environments. The ideal candidate will be responsible for securing privileged accounts, onboarding critical systems, enforcing least privilege principles, and supporting cybersecurity compliance initiatives.

Key Responsibilities

• Administer and maintain the CyberArk Privileged Access Management (PAM) platform.
• Onboard servers, databases, applications, network devices, and cloud platforms into CyberArk.
• Configure and manage CyberArk components including Vault, PVWA, CPM, PSM, PTA, and EPM.
• Support privileged account lifecycle management, password rotations, account discovery, and reconciliation.
• Implement privileged session monitoring, recording, and auditing controls.
• Work with application teams to onboard service accounts and privileged credentials.
• Troubleshoot CyberArk-related issues and perform root cause analysis.
• Integrate CyberArk with Active Directory, LDAP, Azure AD (Entra ID), and MFA solutions.
• Support compliance requirements related to SOX, PCI-DSS, NIST, ISO 27001, and banking regulations.
• Perform health checks, upgrades, patching, and platform maintenance activities.
• Develop automation scripts for account onboarding, reporting, and operational tasks.
• Create operational runbooks, technical documentation, and knowledge articles.
• Participate in security audits and remediation activities.

Required Skills

• 5+ years of experience in Cyber Security with at least 3+ years of CyberArk administration experience.
• Strong hands-on experience with:
• CyberArk Vault
• PVWA (Password Vault Web Access)
• CPM (Central Policy Manager)
• PSM (Privileged Session Manager)
• PTA (Privileged Threat Analytics)
• EPM (Endpoint Privilege Manager)
• Experience with Windows and Linux server administration.
• Understanding of Identity & Access Management (IAM) concepts.
• Experience integrating CyberArk with Active Directory and MFA solutions.
• Knowledge of password management, privileged account governance, and security best practices.
• Experience with PowerShell, Python, or scripting for automation.
• Strong troubleshooting and stakeholder management skills.

Preferred Skills

• Experience with Azure, AWS, and cloud privileged access management.
• Experience with SailPoint, Saviynt, Okta, or Entra ID.
• Familiarity with ServiceNow integration.
• Knowledge of DevSecOps and Secrets Management.
• Experience with Kubernetes, Docker, and cloud-native security.
• Banking or Financial Services domain experience.

Key Technologies

• CyberArk PAM Suite
• CyberArk EPM
• CyberArk Secrets Manager
• Active Directory
• Microsoft Entra ID (Azure AD)
• LDAP
• ServiceNow
• PowerShell
• Python
• Windows Server
• Linux
• Azure / AWS

Qualifications

• Bachelor's degree in Computer Science, Information Security, or related field.
• Preferred Certifications:
• CyberArk Defender
• CyberArk Sentry
• CyberArk Client
• CISSP
• Security+
• AZ-500

Nice-to-Have Banking Experience

• Managing privileged access for banking and financial systems.
• Supporting regulatory audits and compliance reviews.
• Securing service accounts, admin accounts, and production environments.
• Implementing least-privilege and Zero Trust security controls.