Lead Identity Engineer - CyberArk

Key Responsibilities

• Lead end-to-end CyberArk deployments, including design, configuration, integration, and go-live support for enterprise clients.
• Serve as subject matter expert (SME) on CyberArk components including Vault, CPM, PSM, PVWA, PTA, and AAM.
• Collaborate with client stakeholders, security teams, and internal delivery teams to gather requirements and translate them into secure, scalable solutions.
• Develop custom connectors and integrations with other identity platforms and enterprise applications.
• Conduct health checks, upgrades, and performance tuning of existing CyberArk environments.
• Provide technical leadership and mentoring to junior engineers on CyberArk best practices, automation, and troubleshooting.
• Document architecture diagrams, SOPs, and solution design documents.
• Ensure all implementations adhere to compliance and security standards, including SOX, HIPAA, PCI-DSS, and ISO27001.
• Support pre-sales activities including proposal writing, level-of-effort estimation, and solution design workshops.
  

Required Qualifications

• Bachelors degree in Computer Science, Information Security, or related field (or equivalent experience).
• 5+ years of experience in Identity & Access Management (IAM) with at least 3 years focused on CyberArk PAM solutions.
• Proven experience with CyberArk Core PAS suite (Vault, CPM, PVWA, PSM, PTA).
• Hands-on experience integrating CyberArk with Active Directory, SIEM, ticketing systems, and cloud platforms (e.g., AWS, Azure).
• Familiarity with scripting languages (PowerShell, Python) for automation and integration tasks.
• Strong understanding of security frameworks and privileged access governance.
• CyberArk certifications (e.g., CyberArk Defender, Sentry, or Guardian) are highly desirable.