Senior Cyberark Security Engineer (Hybrid Or Remote)

iTRTech Group; São Paulo; Ibrido; BRL 180.000 - 300.000; Tempo pieno

Descrizione del lavoro

iTRTech Group is seeking a Senior CyberArk Security Engineer to lead the PAM program, implementing CyberArk solutions and integrating with enterprise systems in a hybrid/remote Brazilian role.

Ideal candidates have deep CyberArk hands-on experience, with automation in PowerShell/Python and strong knowledge of Zero Trust principles. The role requires collaboration across security, infrastructure, and application teams and English communication for global environments.

Competenze

• Strong hands-on experience with CyberArk PAM.
• Experience implementing, configuring, and supporting CyberArk EPV, PSM, and CPM.
• Experience developing custom connectors/plugins for CyberArk PSM/CPM.
• Knowledge of privileged account lifecycle management, password vaulting, and session monitoring.
• Experience integrating CyberArk with Active Directory and LDAP.
• Automation experience with PowerShell and/or Python.
• Solid understanding of PAM/IAM/Zero Trust/Least Privilege principles.
• Strong leadership, collaboration, and problem-solving skills.
• Professional English communication for international environments.

Mansioni

• Lead the engineering, implementation, configuration, and maintenance of CyberArk PAM solutions.
• Manage privileged account onboarding, secrets management, password vaulting, and account lifecycle processes.
• Develop custom connectors and plugins for CyberArk PSM and CPM.
• Design secure access workflows and integrations with enterprise systems.
• Automate privileged account management processes using PowerShell and/or Python.
• Implement session monitoring and recording capabilities, supporting Zero Trust and Least Privilege.
• Collaborate with infrastructure, security, and application teams to resolve privileged credential incidents.
• Maintain technical documentation, support junior engineers, and contribute to PAM program improvements.

Conoscenze

CyberArk PAM

EPV/PSM/CPM

PowerShell

Python

Active Directory

LDAP

Zero Trust

Least Privilege

Automation

Leadership

Strumenti

CyberArk

Custom Connectors

CyberArk Plugins

ServiceNow

Descrizione del lavoro

SENIOR CYBERARK SECURITY ENGINEER (HYBRID OR REMOTE BRAZIL)

Company hires for hybrid or remote position

Location: Brazil — candidates from any region are welcome

Only candidates already based in Brazil will be considered

Work Model: Hybrid for candidates living in state capitals and Remote for candidates living in countryside/cities outside the state capitals

Language Requirements: Professional English for communication in a global environment

Seniority: Senior (6+ years)

Rate: Candidates should provide their salary expectations

About the Opportunity

We are looking for an experienced Senior CyberArk Security Engineer to lead the implementation, configuration, and continuous improvement of Privileged Access Management (PAM) solutions in enterprise environments.

The professional will act as a technical reference for CyberArk technologies, supporting privileged account security, automation, enterprise integrations, and Zero Trust initiatives.

Responsibilities

• Lead the engineering, implementation, configuration, and maintenance of CyberArk PAM solutions.
• Manage privileged account onboarding, secrets management, password vaulting, and account lifecycle processes.
• Develop custom connectors and plugins for CyberArk PSM and CPM.
• Design secure access workflows and integrations with enterprise systems.
• Automate privileged account management processes using PowerShell and/or Python.
• Implement session monitoring and recording capabilities, supporting Zero Trust and Least Privilege principles.
• Collaborate with infrastructure, security, and application teams to resolve privileged credential incidents.
• Maintain technical documentation, support junior engineers, and contribute to PAM program improvements.

Requirements

• Strong hands-on experience with CyberArk Privileged Access Management (PAM).
• Proven experience implementing, configuring, and supporting CyberArk EPV, PSM, and CPM.
• Experience developing custom connectors and plugins for CyberArk PSM and CPM.
• Strong knowledge of privileged account lifecycle management, password vaulting, and session monitoring.
• Experience integrating CyberArk with Active Directory and LDAP.
• Experience with automation using PowerShell and/or Python.
• Solid understanding of PAM, IAM, Zero Trust, and Least Privilege security principles.
• Strong technical leadership, collaboration, and problem-solving skills.
• Professional English communication skills for international environments.

Nice to Have

• Experience with CyberArk Conjur and Secrets Management.
• Knowledge of ServiceNow and Splunk.
• Experience with AWS, Azure, and/or Google Cloud Platform (GCP).
• Familiarity with NIST, CIS, and SOX security frameworks.
• Experience with Continuous Control Monitoring.
• CyberArk Defender and/or CyberArk Sentry certifications.

Ideal Candidate Profile

A Senior CyberArk Security Engineer with strong hands-on expertise in PAM solutions, particularly CyberArk EPV, PSM, and CPM. The ideal candidate demonstrates experience in custom connector development, privileged access automation, enterprise integrations, and security best practices, with the ability to lead technical initiatives and collaborate effectively with global teams.

5 Questions for Candidates

1. How many years of professional experience do you have with CyberArk PAM solutions?
2. What is your hands-on experience implementing and supporting CyberArk EPV, PSM, and CPM?
3. Have you developed custom connectors or plugins for CyberArk PSM and CPM?
4. What is your experience with privileged account automation, PowerShell/Python, Active Directory integrations, and session monitoring?
5. What are your current salary, salary expectations, and availability to work in a hybrid or remote model in Brazil?

Keywords

CyberArk, CyberArk PAM, Privileged Access Management, EPV, PSM, CPM, CyberArk Conjur, Secrets Management, Privileged Account Management, Password Vaulting, Session Monitoring, Custom Connectors, CyberArk Plugins, PowerShell, Python, Active Directory, LDAP, IAM, Zero Trust, Least Privilege, ServiceNow, Splunk, AWS, Azure, GCP, Cybersecurity, CyberArk Defender, CyberArk Sentry

#EY BR