Senior PAM Engineer - CyberArk (Remote in the US)
Core
Design, implement, and optimize Privileged Access Management (PAM) solutions for clients across on-prem, hybrid, and cloud environments.
Role type
Senior PAM Engineer (Professional Services)
Builds
Secure, scalable CyberArk architectures and client-ready documentation
Domain
Cybersecurity / Identity and Access Management (IAM)
Deliverable
client delivery
Required skills
CyberArk PAS suite (Vault, CPM, PVWA, PSM, PSMP, PTA), platform onboarding (Windows, Unix/Linux, databases, network devices, cloud), scripting (PowerShell, Python), REST APIs, client-facing communication, project management, documentation
Preferred skills
CyberArk certifications (CDE, Sentry, Defender), CyberArk cloud offerings (Privilege Cloud, Identity Security Platform), other IAM/PAM tools (BeyondTrust, Delinea, SailPoint, Okta), DevOps/Secrets Manager (Conjur, AAM), regulated industry compliance (SOX, HIPAA, PCI-DSS)
Technologies
CyberArk Vault, CPM, PVWA, PSM, PSMP, PTA, REST APIs, PowerShell, Python, SIEM, ITSM, IAM, AD/LDAP
Responsibilities
Lead end-to-end CyberArk implementations, upgrades, and migrations; Design and deploy core CyberArk components; Conduct discovery workshops to define PAM strategy; Develop onboarding plans for privileged accounts; Integrate CyberArk with adjacent systems via REST APIs; Create custom connectors and PSM plugins; Produce client-ready documentation; Manage project timelines and client communications; Troubleshoot complex production issues; Mentor junior engineers; Stay current on product roadmap and emerging trends
Seniority
Senior, hands-on IC with mentorship responsibilities