Senior PAM Engineer

The PAM Engineer will be responsible for the implementation, engineering, maintenance, and continuous improvement of the enterprise Privileged Access Management platform. The role will provide hands-on expertise across CyberArk Vault, Central Policy Manager (CPM), Privileged Session Manager (PSM), Central Credential Provider (CCP), Credential Provider (CP), and Privileged Threat Analytics (PTA). The engineer will develop custom integrations, maintain platform currency through upgrades and patching, automate repetitive activities, and work closely with the PAM Operations team to deliver a secure, stable, and scalable PAM service.

Key Responsibilities:

• Design, implement, configure, and maintain CyberArk PAM solutions across enterprise environments.
• Develop, test, deploy, and support custom CPM plugins for password management and reconciliation use cases.
• Develop, test, deploy, and support custom PSM connectors for secure privileged session access.
• Administer and support CyberArk Vault, CPM, PSM, CCP, CP, and PTA components.
• Plan and execute CyberArk platform upgrades, security patches, hotfixes, and lifecycle maintenance activities.
• Automate repetitive engineering and operational tasks using PowerShell, Python, REST APIs, or equivalent technologies.
• Build and support integrations between CyberArk and applications, servers, databases, network devices, cloud services, and DevOps platforms.
• Troubleshoot complex platform, connector, authentication, password rotation, and privileged session issues.
• Perform root cause analysis and implement sustainable remediation for recurring incidents and platform defects.
• Partner with the PAM Operations team on onboarding, incident resolution, service improvements, knowledge transfer, and operational readiness.
• Coordinate technical changes with application, infrastructure, security, and change-management stakeholders.
• Maintain engineering standards, configuration records, technical documentation, and support runbooks.
• Contribute to platform resilience, disaster recovery testing, capacity planning, monitoring, and security compliance activities.

About You:

• Hands-on engineer with strong ownership, analytical thinking, and a structured approach to problem solving.
• Able to work independently while collaborating effectively with engineering, operations, application, infrastructure, and security teams.
• Comfortable coordinating multiple technical activities and communicating clearly with both technical and non-technical stakeholders.
• Committed to continuous learning, service improvement, documentation, and knowledge sharing.

You and Our Values:

• Ambitious - Improve PAM capabilities through practical engineering and automation.
• Curious - Continuously learn, investigate, and challenge existing approaches.
• Empathetic - Listen to stakeholder needs and support teams constructively.
• Courageous - Take ownership of complex technical issues and decisions.
• Nimble - Adapt effectively to changing priorities, technologies, and risks.

Experience and Expertise Needed:

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field, or equivalent professional experience.
• 5 to 10 years of hands-on experience in PAM implementation, engineering, and platform support within enterprise environments.
• Strong implementation and administration experience with CyberArk Vault, CPM, PSM, CCP, CP, and PTA.
• Proven experience developing custom CPM plugins and PSM connectors.
• Experience with CyberArk platform upgrades, patching, migrations, hardening, health checks, and lifecycle management.
• Strong automation and scripting skills using PowerShell, Python, REST APIs, or equivalent technologies.
• Experience integrating PAM with Windows, Linux/Unix, databases, network devices, applications, cloud platforms, and DevOps toolchains.
• Good understanding of privileged account lifecycle management, authentication, password rotation, session isolation, secrets retrieval, and threat analytics.
• Experience supporting complex incidents, performing root cause analysis, and coordinating technical remediation with PAM Operations.
• Good understanding of IAM, cybersecurity principles, enterprise change management, and security control requirements.
• Strong written and verbal communication, stakeholder management, and cross-team coordination skills.
• Ability to manage competing priorities, work independently, and deliver engineering activities through to completion.
• CyberArk certification such as CDE, Sentry, or equivalent is preferred.
• Experience with Azure, AWS, or GCP and integration with ServiceNow or CI/CD platforms is an advantage.