Senior IAM CyberArk Engineer

Job Title:

Role Overview

We are looking for an experienced IAM CyberArk Senior Associate to manage and support privileged identity management operations for large-scale clients across multiple industry verticals. The ideal candidate will have deep technical expertise in CyberArk PAM solutions, cloud environments, and a proactive approach to security incident management and privileged access lifecycle.

Key Responsibilities

• Manage and operate CyberArk PAM solutions including PAS, PAM Cloud, PTA, EPM, Alero, and related modules.
• Lead onboarding of target systems and applications such as Windows, UNIX/Linux, Mainframe, Databases, AWS, Azure, and user identities.
• Administer privileged account access, credential vaulting, and enforce policy-based access controls.
• Investigate and remediate security incidents related to privileged access by analyzing logs and system alerts.
• Provide expert-level technical support and troubleshooting for CyberArk and privileged access issues.
• Develop and maintain comprehensive documentation including SOPs, user guides, and knowledge articles.
• Assist and lead training programs to enhance user and stakeholder understanding of PAM best practices.
• Serve as the subject matter expert (SME) and provide strategic oversight for PAM functions across the organization.
• Utilize scripting and automation via REST APIs and customize platform functionality using Connectors/Plugins with AutoIT or Shell scripting.
• Configure and manage discovery and auto-detection tools to continuously identify privileged accounts.
• Collaborate with IAM and security teams to recommend process improvements and optimize privileged access management.
• Demonstrate familiarity and/or hands-on experience with other PAM/PIM tools like Thycotic, BeyondTrust, and PowerBroker.
• Flexibility to support a 24/7 operational environment ensuring high availability and rapid incident response.

Qualifications

• Minimum 5 years of experience in CyberArk PAM operations supporting enterprise clients.
• Mandatory CyberArk CDE or Sentry certification.
• Strong understanding of cloud IAM architecture, especially within AWS and Azure ecosystems.
• Expertise in CyberArk Vault administration, privileged account management, and security best practices.
• Proficient in automation, scripting (REST API, AutoIT, Shell), and CyberArk platform customization.
• Experience in incident investigation, root cause analysis, and remediation of privileged access issues.
• Strong documentation and training skills with the ability to communicate technical details effectively.
• Prior experience with additional PAM platforms such as Thycotic, BeyondTrust, or PowerBroker is desirable.
• Excellent problem-solving, analytical, and communication skills.