> Markdown version of [/jobs/ext/115498-pam-engineer-cyberark-hashivault](https://www.wearedevelopers.com/jobs/ext/115498-pam-engineer-cyberark-hashivault). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# PAM Engineer (CyberArk/hashivault)

- **Company:** TEKSYSTEMS INC.
- **Location:** Irving, TX, United States
- **Experience:** Experienced
- **Salary:** $111,488.0 - $114,400.0
- **Contract:** Temporary to permanent
- **Skills:** Active Directory, Agile Methodology, Confluence, JIRA, Build Automation, Databases, DevOps, Python (Programming Language), Key Management, Lightweight Directory Access Protocols (LDAP), Microsoft SQL Server, Oracle (Applications), Windows PowerShell, Remote Access Technology, Scripting, Cyberark, Hashicorp
- **Published:** May 21, 2026
- **Apply:** https://www.juju.com/job/00000000g19b0a

## About the Role

+ Automation using scripting (PowerShell required, Python preferred)

 + Exposure to broader CyberArk suite (PVWA, PSM, etc.)

 + Optional exposure to:

 + CyberArk Alero (vendor remote access)

 + Dynamic Privileged Access (DPA)

Required Qualifications

 + 2+ years of hands-on experience with CyberArk OR HashiCorp Vault

 + Candidates with HashiCorp Vault + some CyberArk exposure are strongly encouraged

 + Experience working in enterprise environments (large-scale, regulated, or highly structured)

 + Basic understanding of privileged access management (PAM) concepts

 + Experience with scripting for automation:

 + PowerShell required

 + Python or similar scripting languages preferred

 + Familiarity with:

 + Credential/Secrets Management

 + Windows environments and infrastructure

 + Strong problem-solving skills and ability to work independently

Preferred Qualifications

 + Exposure to CyberArk components such as:

 + CPM, PVWA, PSM

 + Experience integrating PAM tools with:

 + Active Directory / LDAP

 + Databases (SQL Server, Oracle, etc.)

 + Familiarity with Agile / DevOps environments

 + Experience working in financial services or other regulated industries

 + Knowledge of tools like Jira / Confluence

Nice to Have

 + CyberArk Alero or vendor remote access tools

 + Exposure to Dynamic Privileged Access (DPA)

 + CyberArk certifications

## Description

One of our top financial services clients is seeking a PAM Engineer to support ongoing product maturity and automation initiatives within their Privileged Access Management (PAM) environment.

This role will focus on expanding capabilities within CyberArk and/or HashiCorp Vault, moving beyond basic credential storage into automation, credential rotation, and enhanced user experience.

Key Responsibilities

 + Support design and engineering efforts across CyberArk and/or HashiCorp Vault environments

 + Develop CPM plugins and integrations to manage credentials across various platforms and applications

 + Assist in onboarding accounts into the vault and enabling password rotation via CPM

 + Build automation scripts (PowerShell / Python) to:

 + Retrieve credentials programmatically

 + Enable credential rotation workflows

 + Partner with internal teams to improve PAM adoption and user experience

 + Contribute to solution design for regulatory and compliance-driven initiatives

 + Help enhance PAM maturity by introducing automation and scalable engineering practices


## Related Videos

- [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure)
- [From DevOps to Scaled DevOps: How We’re Rebuilding Continuous Delivery as a Platform](https://www.wearedevelopers.com/videos/100018-from-devops-to-scaled-devops-how-we-re-rebuilding-continuous-delivery-as-a-platform)
- [Improving quality with Agentic AI with Rovo Dev and Xray](https://www.wearedevelopers.com/videos/2005-improving-quality-with-agentic-ai-with-rovo-dev-and-xray)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [DevOps Maturity Check – a way to balance autonomy and alignment](https://www.wearedevelopers.com/videos/58-devops-maturity-check-a-way-to-balance-autonomy-and-alignment)
- [Collaboration Quantified: Lessons from Open Source Developer Networks](https://www.wearedevelopers.com/videos/1422-collaboration-quantified-lessons-from-open-source-developer-networks)

## Related Articles

- [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Find a Developer Job: 12 Best Job Sites For Developers](https://www.wearedevelopers.com/magazine/165-find-a-developer-job-12-best-job-sites-for-developers)
- [Dev Digest 121 - AI goes offline](https://www.wearedevelopers.com/magazine/456-dev-digest-121-ai-goes-offline)
- [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)