PAM Engineer (CyberArk/hashivault)

One of our top financial services clients is seeking a PAM Engineer to support ongoing product maturity and automation initiatives within their Privileged Access Management (PAM) environment.

This role will focus on expanding capabilities within CyberArk and/or HashiCorp Vault, moving beyond basic credential storage into automation, credential rotation, and enhanced user experience.

Key Responsibilities

• Support design and engineering efforts across CyberArk and/or HashiCorp Vault environments

• Develop CPM plugins and integrations to manage credentials across various platforms and applications

• Assist in onboarding accounts into the vault and enabling password rotation via CPM

• Build automation scripts (PowerShell / Python) to:

• Retrieve credentials programmatically

• Enable credential rotation workflows

• Partner with internal teams to improve PAM adoption and user experience

• Contribute to solution design for regulatory and compliance-driven initiatives

• Help enhance PAM maturity by introducing automation and scalable engineering practices

• Automation using scripting (PowerShell required, Python preferred)

• Exposure to broader CyberArk suite (PVWA, PSM, etc.)

• Optional exposure to:

• CyberArk Alero (vendor remote access)

• Dynamic Privileged Access (DPA)

Required Qualifications

• 2+ years of hands-on experience with CyberArk OR HashiCorp Vault

• Candidates with HashiCorp Vault + some CyberArk exposure are strongly encouraged

• Experience working in enterprise environments (large-scale, regulated, or highly structured)

• Basic understanding of privileged access management (PAM) concepts

• Experience with scripting for automation:

• PowerShell required

• Python or similar scripting languages preferred

• Familiarity with:

• Credential/Secrets Management

• Windows environments and infrastructure

• Strong problem-solving skills and ability to work independently

Preferred Qualifications

• Exposure to CyberArk components such as:

• CPM, PVWA, PSM

• Experience integrating PAM tools with:

• Active Directory / LDAP

• Databases (SQL Server, Oracle, etc.)

• Familiarity with Agile / DevOps environments

• Experience working in financial services or other regulated industries

• Knowledge of tools like Jira / Confluence

Nice to Have

• CyberArk Alero or vendor remote access tools

• Exposure to Dynamic Privileged Access (DPA)

• CyberArk certifications

We're partners in transformation. We help clients activate ideas and solutions to take advantage of a new world of opportunity. We are a team of 80,000 strong, working with over 6,000 clients, including 80% of the Fortune 500, across North America, Europe and Asia. As an industry leader in Full-Stack Technology Services, Talent Services, and real-world application, we work with progressive leaders to drive change. That's the power of true partnership. TEKsystems is an Allegis Group company. The company is an equal opportunity employer and will consider all applications without regards to race, sex, age, color, religion, national origin, veteran status, disability, sexual orientation, gender identity, genetic information or any characteristic protected by law. About TEKsystems and TEKsystems Global Services We're a leading provider of business and technology services. We accelerate business transformation for our customers. Our expertise in strategy, design, execution and operations unlocks business value through a range of solutions. We're a team of 80,000 strong, working with over 6,000 customers, including 80% of the Fortune 500 across North America, Europe and Asia, who partner with us for our scale, full-stack capabilities and speed. We're strategic thinkers, hands-on collaborators, helping customers capitalize on change and master the momentum of technology. We're building tomorrow by delivering business outcomes and making positive impacts in our global communities. TEKsystems and TEKsystems Global Services are Allegis Group companies. Learn more at TEKsystems.com. The company is an equal opportunity employer and will consider all applications without regard to race, sex, age, color, religion, national origin, veteran status, disability, sexual orientation, gender identity, genetic information or any characteristic protected by law. San Francisco Fair Chance Ordinance: Pursuant to the San Francisco Fair Chance Ordinance, for all positions located in the city and county of San Francisco, we will consider for employment qualified applicants with arrest and conviction records. Massachusetts Lie Detector: It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability. Use of Artificial Intelligence (AI): We may use Artificial Intelligence (AI) to support parts of our hiring process, including sourcing, screening, and evaluating candidates. AI helps assess applications and qualifications, but final decisions are made by our hiring team. By applying, you acknowledge and agree that your application may be reviewed using AI tools.