CyberArk

Senior CyberArk Security Engineer

Job Summary:

Raymond James is seeking a Senior CyberArk Security Engineer to play a critical role in advancing our Privileged Access Management (PAM) program. This is a high-impact position focused on engineering and scaling CyberArk solutions across a complex enterprise environment. If you're passionate about securing privileged identities, automating access controls, and driving zero trust principles, this is your opportunity to lead from the front.

Responsibilities:

· Lead the design, implementation, and optimization of CyberArk PAM solutions, including EPV, PSM, CPM, and Conjur.

· Serve as a technical SME for privileged access security, guiding architecture decisions and enterprise-wide PAM strategy.

· Drive onboarding and lifecycle management of privileged accounts, services, and secrets across on-prem and cloud environments.

· Architect and implement secure access workflows, integrating CyberArk with enterprise tools (e.g., ServiceNow, Active Directory, cloud platforms).

· Design, build, and implement custom connectors and plugins for CyberArk Privileged Session Manager (PSM) and Central Policy Manager (CPM).

· Develop and maintain automation frameworks for account onboarding, password rotation, and compliance enforcement.

· Implement and enhance session management and monitoring, including privileged session isolation and recording.

· Lead Continuous Control Monitoring (CCM) initiatives to ensure adherence to security policies and regulatory requirements.

· Collaborate with security, infrastructure, and application teams to embed least privilege and zero trust principles.

· Provide mentorship and technical leadership to junior engineers and contribute to team standards and best practices.

· Develop and maintain documentation, runbooks, and operational procedures for PAM services.

· Support incident response efforts related to privileged access and credential compromise scenarios.

What You Bring:

· 5–8+ years of experience in Identity & Access Management, with a strong focus on Privileged Access Management (PAM).

· Deep hands-on expertise with CyberArk, including EPV, PSM, CPM, and preferably Conjur / Secrets Management.

· Hands-on experience building and implementing connectors and plugins for CyberArk PSM and CPM.

· Strong understanding of authentication, authorization, and credential management across Windows, Linux, and cloud environments.

· Experience integrating CyberArk with:

o Active Directory / LDAP

o ServiceNow (or similar ticketing systems)

o Cloud platforms (AWS, Azure, GCP preferred)

· Proficiency in scripting/automation using PowerShell, Python, or similar.

· Experience with security monitoring and logging tools (e.g., Splunk).

· Solid understanding of security frameworks and compliance requirements (e.g., NIST, CIS, SOX).

· Ability to design scalable, secure solutions and influence cross-functional stakeholders.

Education / Experience:

· Bachelor’s degree in computer science, Information Technology, Cybersecurity, or related field (or equivalent experience).

· Relevant certifications preferred:

o CyberArk Defender / Sentry

o CISSP, CISM, or similar