PAM Engineer – CyberArk

About the Company

Our client is a Global Tier 1 IT consulting firm based out of the United States. They strongly believe global challenges need global solutions. They are continually engaged with employees, clients, partners, public institutions, and community organizations across the world to step up and rise to the occasion.

About the Role

PAM Engineer – CyberArk

We are seeking an experienced CyberArk PAM Engineer to design, implement, administer, and support Privileged Access Management solutions across enterprise environments. The ideal candidate will be responsible for securing privileged accounts, onboarding critical systems, enforcing least privilege principles, and supporting cybersecurity compliance initiatives.

Responsibilities

• Administer and maintain the CyberArk Privileged Access Management (PAM) platform.
• Onboard servers, databases, applications, network devices, and cloud platforms into CyberArk.
• Configure and manage CyberArk components including Vault, PVWA, CPM, PSM, PTA, and EPM.
• Support privileged account lifecycle management, password rotations, account discovery, and reconciliation.
• Implement privileged session monitoring, recording, and auditing controls.
• Work with application teams to onboard service accounts and privileged credentials.
• Troubleshoot CyberArk-related issues and perform root cause analysis.
• Integrate CyberArk with Active Directory, LDAP, Azure AD (Entra ID), and MFA solutions.
• Support compliance requirements related to SOX, PCI-DSS, NIST, ISO 27001, and banking regulations.
• Perform health checks, upgrades, patching, and platform maintenance activities.
• Develop automation scripts for account onboarding, reporting, and operational tasks.
• Create operational runbooks, technical documentation, and knowledge articles.
• Participate in security audits and remediation activities.

Qualifications

• Bachelor's degree in Computer Science, Information Security, or related field.
• Preferred Certifications:
• CyberArk Defender
• CyberArk Sentry
• CyberArk Guardian
• CISSP
• Security+
• AZ-500

Required Skills

• 5+ years of experience in Cyber Security with at least 3+ years of CyberArk administration experience.
• Strong hands-on experience with:
• CyberArk Vault
• PVWA (Password Vault Web Access)
• CPM (Central Policy Manager)
• PSM (Privileged Session Manager)
• PTA (Privileged Threat Analytics)
• EPM (Endpoint Privilege Manager)
• Experience with Windows and Linux server administration.
• Understanding of Identity & Access Management (IAM) concepts.
• Experience integrating CyberArk with Active Directory and MFA solutions.
• Knowledge of password management, privileged account governance, and security best practices.
• Experience with PowerShell, Python, or scripting for automation.
• Strong troubleshooting and stakeholder management skills.

Pay range and compensation package

Not specified.

Key Technologies

• CyberArk PAM Suite
• CyberArk EPM
• CyberArk Secrets Manager
• Active Directory
• Microsoft Entra ID (Azure AD)
• LDAP
• ServiceNow
• PowerShell
• Python
• Windows Server
• Linux
• Azure / AWS

Nice-to-Have Banking Experience

• Managing privileged access for banking and financial systems.
• Supporting regulatory audits and compliance reviews.
• Securing service accounts, admin accounts, and production environments.
• Implementing least-privilege and Zero Trust security controls.

Contact Details

• [email protected]
• +1 (571) 655-3890

Equal Opportunity Statement

Equal Opportunity Statement: Our clients provide equal opportunities to all its employees and all qualified applicants for employment, without regard to their race, caste, religion, color, ancestry, marital status, sex, age, nationality, disability, and veteran status. Employees of our clients are treated with dignity and in accordance with their policy to maintain a work environment free of sexual harassment, whether physical, verbal, or psychological. Employee policies and practices are administered in a manner that would ensure that in all matters equal opportunity is provided to those eligible and the decisions are merit-based.