Sr. CyberArk PAM Engineer

We are seeking a highly experienced Senior CyberArk PAM Engineer to support and maintain our privileged access management environment. This is a hands-on operational role requiring extensive CyberArk experience and the ability to contribute with minimal ramp-up quickly. The primary focus will be on ensuring platform stability, supporting users onboarding, managing permissions, and maintaining day-to-day CyberArk operations within an established environment.

The ideal candidate will be a CyberArk subject matter expert who can independently manage privileged access workflows, troubleshoot issues, and keep the platform running smoothly while supporting ongoing business operations.

Key Responsibilities

• Administer and maintain the organization's CyberArk Privileged Access Management (PAM) platform
• Support onboarding of new privileged accounts, secondary IDs, service accounts, and users into CyberArk
• Manage user permissions, safes, roles, and access requests in accordance with security policies
• Troubleshoot and resolve CyberArk platform issues, account onboarding challenges, and access-related incidents
• Ensure the continued stability, availability, and operational health of the CyberArk environment
• Perform routine maintenance, monitoring, and operational support for CyberArk components
• Support privileged credential lifecycle activities, including vaulting, password management, rotation, and access validation
• Partner with security, infrastructure, and application teams to facilitate privileged access requirements
• Assist with audits and reporting related to privileged account administration
• Provide operational support for CyberArk integrations and related components as needed
• Document processes, procedures, and support activities to ensure knowledge continuity CyberArk Environment

The environment includes:

• CyberArk Self-Hosted Vault
• Privileged Access Management (PAM) Platform
• CyberArk Endpoint Privilege Manager (EPM)
• CyberArk Workforce Password Manager While familiarity with EPM and Workforce Password Manager is beneficial, the primary focus of this role will be supporting the core CyberArk PAM platform and maintaining operational continuity.

Required Qualifications

• 5+ years of hands-on CyberArk administration and engineering experience
• Proven experience supporting enterprise CyberArk environments with minimal supervision
• Strong experience with:
  • CyberArk Vault
  • Privileged Account Management
  • Safes, Platforms, and Account Onboarding
  • Access Control and Privileged Identity Administration
• Experience onboarding privileged and secondary accounts into CyberArk
• Strong understanding of Active Directory, LDAP, Windows Server, and privileged account management concepts
• Experience managing permissions, role-based access controls, and privileged access workflows
• Ability to independently troubleshoot and resolve CyberArk operational issues
• Excellent communication and documentation skills Preferred Qualifications
• CyberArk Defender, Sentry, or Client Certification
• Experience with CyberArk Endpoint Privilege Manager (EPM)
• Experience with CyberArk Workforce Password Manager
• Experience supporting PAM environments in large enterprise organizations
• PowerShell scripting experience for operational automation and administration
• Familiarity with audit and compliance requirements related to privileged access management What Success Looks Like
• Quickly becomes productive with minimal training
• Maintains a stable and secure CyberArk environment
• Efficiently supports the onboarding of privileged and secondary accounts
• Handles permissions and access-related requests with minimal oversight
• Ensures business continuity by keeping the platform operational and responsive to user needs