Job
Description
Manager CyberArk Secure Cloud Access (SCA) We are seeking a skilled CyberArk Secure Cloud Access (SCA) Specialist with 7-10 years of hands-on experience to architect, implement, and manage secure access to cloud environments using CyberArks PAM or SCA solution. The ideal candidate will have deep experience in privileged access management, cloud security, and Zero Trust architectures, with a focus on enabling secure and just-in-time access to Azure without exposing credentials. Strong analytical thinking, ability to solve complex problems, troubleshooting mindset, user onboarding, and developing metrics/dashboard expertise. Experienced with Big 4 consulting engagements or delivering Cyber Ark security transformation projects for Fortune 500 clients is a plus. Experience Deploy, configure, and manage CyberArk Secure Cloud Access (SCA) to secure privileged access to cloud consoles, services, and infrastructure Design and implement Just-in-Time (JIT) access workflows to Azure without standing privileges Integrate SCA with identity providers such as Azure AD for federated authentication and role-based access Manage secure session brokering, recording, and monitoring for web consoles and CLI access Ensure integration with enterprise security tools (SIEM, ITSM, MFA, logging, etc. ) Automate access provisioning and deprovisioning via APIs and CI/CD pipelines Develop and enforce cloud access policies based on Zero Trust and least privilege principles Work cross-functionally with cloud engineering, DevOps, GRC, and security teams to align SCA strategies with business and compliance requirements Maintain access audit trails and reporting dashboards for internal and external audits Troubleshoot SCA session issues, policy misconfigurations, and integration failures Create technical documentation, runbooks, SOPs, and user training materials Automated scripts (PowerShell, REST API) for onboarding, reporting, and maintenance Maintained and enhanced SCA policies aligned to compliance requirements (ISO, NIST, HIPAA) Collaborate with InfoSec, Infrastructure, and App teams to enforce privileged access governance Develop technical documentation, SOPs, and knowledge base articles Core Competencies CyberArk Secure Cloud Access (SCA) Architecture & Design Cloud Access Governance Privileged Session Management for Cloud Resources Experience with Azure access models and native identity integration Configuring secure access to cloud IaaS/PaaS components Integrating CyberArk SCA with Identity Providers such as Azure AD Cloud-native Role Mapping Enforcing access elevation via temporary credentials or federated roles Integrating SCA with SIEM, SOC, ITSM Working with CI/CD pipelines and cloud-native tools Diagnosing access issues, session failures, and configuration mismatches Ensuring access provisioning and monitoring align with cloud security best practices Designing and implementing access policies based on user roles, device posture, and risk levels Creating runbooks, SOPs, and onboarding guides for teams managing or using SCA Security Dashboarding, Reporting & Metrics User Onboarding & Lifecycle Management Incident Response & Troubleshooting Regulatory Compliance (NIST, HIPAA, ISO 27001) Cross-functional Collaboration (IT, SecOps, GRC) Education & Qualifications: Bachelor s degree in computer science. CyberArk Certified Delivery Engineer (CDE) certification is a plus. 7 10 years of IT security experience, with at least 5 years in CyberArk SCA Strong hands-on experience with CyberArk Secure Cloud Access (SCA) or equivalent solutions Experience onboarding a wide range of privileged accounts (OS, DB, cloud, apps) Experience with Active Directory, LDAP, and MFA integration Experience with identity federation (SAML, OIDC) and cloud-native role mapping (IAM roles, RBAC) Knowledge of Zero Trust Architecture, least privilege, and privileged session management Experience with SCA-related scripting (PowerShell, Python, REST API) Familiarity with cloud security best practices, access logging, and compliance reporting
