Senior CyberArk Engineer – Privileged Access Management

About the role

The Senior CyberArk Engineer will design, deploy, and maintain privileged access security solutions using the CyberArk suite. This role protects critical systems, credentials, and privileged accounts while ensuring compliance with security standards and regulations.

Key responsibilities

• Design, configure, and operate the full on‑premises CyberArk PAS suite (EPV, PSM, PSM‑SSH, CPM, PTA).
• Implement and manage CyberArk safes, platforms, policies, and connectors.
• Integrate CyberArk with LDAP/AD, SIEM, ticketing systems, and cloud platforms (AWS, Azure, GCP).
• Develop and enforce privileged access policies, conduct threat modeling, and align PAM with regulatory frameworks (SOX, GLBA, NYDFS).
• Automate onboarding of privileged accounts and credential rotation using REST APIs, PowerShell, or Python.
• Perform upgrades, patching, health checks, and system hardening; provide on‑call and escalation support.
• Collaborate with IAM, security operations, risk, and compliance teams; mentor junior engineers and produce documentation.

Required profile

• 5–8 years of experience in information security or IAM.
• 3–5 years of hands‑on CyberArk engineering experience.
• Strong understanding of privileged access management principles.
• Experience supporting large‑scale, high‑availability PAM environments.

Required skills

• CyberArk PAS components: EPV, PSM, PSM‑SSH, CPM, PTA.
• Scripting: PowerShell, Python (or equivalent).
• Windows and Linux administration.
• Active Directory, LDAP, MFA integrations.
• Networking basics: firewalls, proxies, DNS.
• Cloud platforms: AWS, Azure, GCP.
• REST API integration and automation.