Identity Engineer - Privilege Access
Core
Administering and securing the enterprise's Privileged Access Management (PAM) and Non-Human Identity (NHI) environment, focusing on CyberArk Privileged Cloud and lifecycle governance of service accounts, API keys, and machine identities.
Role type
Senior Identity Engineer (PAM & NHI)
Builds
Secure, reliable, and well-governed access to critical systems via platform administration and operational security practices.
Domain
Cybersecurity / Identity and Access Management (IAM)
Required skills
CyberArk Privileged Cloud, PSM/CPM operations, Non-Human Identity (NHI) management, Secrets management, PowerShell scripting, Python/REST API, Active Directory/LDAP, SAML, OAuth 2.0, MFA, SIEM integration, Network troubleshooting (firewall, NAT, DNS), Certificate management
Preferred skills
Experience with SOX, PCI-DSS, NIST, ISO 27001 compliance frameworks
Technologies
CyberArk Privileged Cloud, CyberArk SDKs, PowerShell, Python, REST APIs, Active Directory, LDAP, SAML, OAuth 2.0, SIEM
Responsibilities
Administer CyberArk Privileged Cloud platform including user/group management, safe management, and vault configuration. Configure and enforce password, access, and workflow policies for privileged account onboarding and rotation. Own end-to-end Non-Human Identity (NHI) management including service accounts, API keys, secrets, and certificates. Implement NHI lifecycle governance including discovery, ownership assignment, credential rotation, and decommissioning. Administer secrets management and vaulting for applications, automation, and CI/CD pipelines. Resolve PSM and CPM issues including remote access connectivity and privileged account management failures. Troubleshoot complex network and connectivity issues related to privileged and non-human access. Support authentication and authorization troubleshooting across AD/LDAP, SAML, OAuth 2.0, MFA, and SSO. Develop PowerShell and Python/REST API scripts to automate PAM and NHI onboarding, credential rotation, discovery, and reporting. Monitor and analyze CyberArk, system, and network logs supporting SIEM integration and incident response. Apply privileged access and NHI security best practices supporting compliance with SOX, PCI-DSS, NIST, and ISO 27001. Partner with Security, Infrastructure, and Application teams to integrate PAM and NHI solutions across enterprise environments.