CyberArk - PAM/Cloud

This role requires deep expertise in CyberArk PAM and Endpoint Privilege Manager (EPM), Secure Infrastructure Access (SIA), Just-in-Time (JIT) privileged access, application onboarding, password rotation, privileged session access, secrets management, and cloud integrations. The successful candidate will define the current-state architecture, recommend a target-state design based on CyberArk and industry best practices, and lead or support execution of the resulting roadmap.

Must-Have Skills

• CyberArk PAM implementation
• CyberArk Cloud / SaaS
• CyberArk EPM (Endpoint Privilege Manager)
• CyberArk SIA (Secure Infrastructure Access)
• JIT (Just-in-Time Privileged Access)
• CPM (Password Rotation & Reconciliation)
• PSM / PSMP (Privileged Session Management)
• Account, Service Account & Application Onboarding
• Secrets Management
• Windows & Linux Privileged Access
• PowerShell, Python, REST API Automation
• CyberArk Architecture Assessment & PAM Roadmap Development, * Assess and optimize existing CyberArk environments.
• Design CyberArk target-state architecture and PAM roadmap.
• Implement CyberArk Cloud, SIA, JIT, and EPM solutions.
• Manage password rotation, session monitoring, and secrets management.
• Onboard applications, service accounts, and privileged accounts.
• Integrate CyberArk with IAM, cloud, ITSM, and SIEM platforms.
• Develop automation using PowerShell, Python, and APIs.
• Create standards, SOPs, and governance processes., 1. CyberArk Cloud/SaaS 2. EPM Implementation 3. SIA Implementation 4. JIT Privileged Access 5. CPM & PSM 6. Secrets Management 7. PowerShell/Python Automation 8. CyberArk Architecture & Roadmap Experience

We are seeking an experienced Senior CyberArk PAM Implementation Engineer to assess, optimize, and enhance our existing CyberArk Privileged Access Management environment. The ideal candidate will have strong hands-on experience with CyberArk Cloud/SaaS and the ability to perform a comprehensive assessment of the existing PAM implementation, identify security and operational gaps, and develop a strategic roadmap for utilizing CyberArk capabilities to their fullest extent., * 5+ years of hands-on CyberArk PAM engineering.

• Strong CyberArk Cloud/SaaS experience.
• Experience with SIA and JIT implementations.
• CyberArk assessment and architecture review experience.
• Password rotation, reconciliation, and session management.
• Application onboarding and secrets management.
• Windows and Linux administration.
• Cloud integration (Azure, AWS, or GCP).

Strongly Preferred

• CyberArk EPM design, deployment, policy development, and agent rollout.
• PTA (Privileged Threat Analytics).
• Kubernetes, DevOps, CI/CD experience.
• ITSM and SIEM integrations.

Preferred Certifications

• CyberArk Defender
• CyberArk Sentry
• CyberArk Cloud Certifications
• CISSP (nice to have)