Senior CyberArk Engineer

Socium - Teams Done Differently; Abu Dhabi; Presencial; AED 300.000 - 520.000; Jornada completa

Descripción de la vacante

Socium - Teams Done Differently is seeking an experienced CyberArk PAM Architect to lead enterprise-wide deployment, upgrade and migration of CyberArk solutions. You will design and maintain Vault, PVWA, CPM, PSM, PTA, and related components, and drive integration with Active Directory, Azure AD, SIEM, and ITSM platforms.

The role requires hands-on DevOps skills (PowerShell, Python, REST APIs, Jenkins, Ansible, Terraform, Git) and strong troubleshooting capabilities.

Formación

• Experience designing and deploying CyberArk architecture including Vault, PVWA, CPM, PSM, PTA, PSMP, PTA and AAM.
• Proven ability to integrate CyberArk with AD/LDAP, Azure AD and ITSM/SIEM platforms.
• Strong hands-on experience with DevOps and automation tools (PowerShell, Python, REST APIs, Jenkins, Ansible, Terraform, Git).

Responsabilidades

• Lead architecture, deployment, upgrade and migration of CyberArk PAM across large enterprises.
• Design, implement, and maintain CyberArk Vault, PVWA, CPM, PSM, PTA, and other components.
• Perform RCA for critical incidents and provide permanent fixes to recurring issues.
• Manage CyberArk platform hardening, security baselines, certificate lifecycle and vulnerability remediation.
• Configure and troubleshoot password management policies and service accounts.
• Develop CPM plugins and integration components for complex target systems and apps.
• Integrate CyberArk with AD, LDAP, Azure AD, Entra ID, SIEM, ITSM and third-party apps.
• Support large-scale privileged account onboarding across Windows, Linux/Unix, databases, networks, cloud and apps.
• Conduct CyberArk health assessments, platform audits, security reviews and compliance validation.
• Implement Just-In-Time access, privileged workflows and approval mechanisms.
• Configure PTA policies, alert tuning, risk monitoring and incident investigations.
• Develop and optimize CyberArk REST API integrations for automation.
• Plan capacity, optimize environments and tune performance of Vault, PVWA, CPM, PSM, PSMP.
• Participate in DR planning, resilience testing and business continuity exercises.
• Provide L3 technical leadership and mentorship to support teams.
• Ensure security reviews and compliance with internal policies and governance standards.
• Collaborate with infrastructure, DB, app, cloud and security teams for secure privileged access controls.
• Support cloud privileged access management across Azure, AWS, GCP and hybrid environments.

Conocimientos

CyberArk PAM Suite

CyberArk REST APIs

PowerShell

Python

AutoIt

Selenium

Herramientas

Jenkins

Ansible

Terraform

Git

Selenium

Descripción del empleo

Eligibility:

Preference will be given to candidates holding a Spouse visa, Freelance Visa/Business License or Golden Visa. Visa sponsorship is not provided for this role, so candidates must already have a valid visa or be willing to self-sponsor.

Responsibilities:

• Lead architecture, deployment, upgrade, and migration activities for CyberArk PAM solutions across complex enterprise environments.
• Design, implement, and maintain CyberArk Vault, PVWA, CPM, PSM, PSMP, PTA, AAM (CP/CCP).
• Perform root cause analysis (RCA) for critical incidents and provide permanent fixes to recurring CyberArk platform issues.
• Manage CyberArk platform hardening, security baseline implementation, certificate lifecycle management, and vulnerability remediation.
• Configure and troubleshoot password management policies, reconciliation accounts, dependency management, and service account onboarding.
• Design and develop custom CPM plugins and connection components for complex target systems and applications.
• Integrate CyberArk with Active Directory, LDAP, Azure AD, Entra ID, SIEM solutions, ITSM platforms, and third-party applications.
• Support large-scale privileged account onboarding projects, including Windows, Unix/Linux, Databases, Network Devices, Cloud Platforms, and Applications.
• Conduct CyberArk health assessments, platform audits, security reviews, and compliance validation activities.
• Implement and manage Just-In-Time (JIT) access solutions, privileged access workflows, and approval mechanisms.
• Configure and maintain Privileged Threat Analytics (PTA) policies, alert tuning, risk monitoring, and incident investigation.
• Develop and optimize CyberArk REST API integrations for enterprise automation and orchestration requirements.
• Perform capacity planning, environment optimization, and performance tuning for Vault, PVWA, CPM, PSM, and PSMP components.
• Participate in disaster recovery planning, DR drills, infrastructure resilience testing, and business continuity exercises.
• Provide L3 technical leadership and mentorship to support teams for CyberArk operational and project activities.
• Conduct security reviews and ensure compliance with internal policies, regulatory requirements, and privileged access governance standards.
• Collaborate with infrastructure, database, application, cloud, and security teams to design secure privileged access controls.
• Support cloud privileged access management solutions across Azure, AWS, GCP, and hybrid environments.
• Perform log analysis using Vault logs, CPM logs, PSM recordings, PTA alerts, and operating system logs for incident resolution.
• Create technical documentation, operational runbooks, SOPs, architecture diagrams, and knowledge base articles.
• Lead major incidents, change implementations, platform upgrades, and production releases following enterprise change management processes.
• Strong experience with Windows Server, Linux/Unix administration, IIS, SQL Server, networking fundamentals, SSL certificates, and authentication protocols including LDAP, Kerberos, SAML, OAuth, and RADIUS.
• Experience supporting enterprise-scale CyberArk deployments managing tens of thousands of privileged accounts across multiple regions and business units.
• Hands-on experience with DevOps and automation technologies including PowerShell, Python, REST APIs, Jenkins, Ansible, Terraform, Git, AutoIt, and Selenium.

Skills

• CyberArk PAM Suite (Vault, PVWA, CPM, PSM, PSMP, PTA, , CP,CCP)
• CyberArk REST APIs
• PowerShell, Python, AutoIt, Selenium