CyberArk PAM & EPM Lead

Auxis; Bogotá; Presencial; COP 180.000.000 - 240.000.000; Jornada completa

Descripción de la vacante

Auxis in Bogotá seeks a senior CyberArk PAM/EPM engineer to lead the engineering, administration, implementation and support of the CyberArk Privilege Cloud and Endpoint Privilege Manager platforms. The role acts as the technical lead for PAM initiatives, automation, governance, and operational excellence.

You will drive onboarding, policy design, and integration with AD/Entra ID, ServiceNow, and cloud platforms while mentoring engineers and advancing runbooks, SOPs and audit readiness.

Formación

• Proficiency with CyberArk Privilege Cloud components: Identity Administration, PVWA, CPM, PSM, PSMP, CCP
• Experience with EPM and PAM operations across SaaS environments
• Experience with Active Directory and Entra ID
• Experience with ServiceNow integration and incident/change governance
• Automation and scripting using PowerShell, REST APIs, Python
• Windows and Linux administration experience
• Familiarity with ITIL governance and audit requirements
• English language proficiency at B2+ level

Responsabilidades

• Lead admin and support of CyberArk PAM/EPM platforms
• Manage Safes, Platforms, CPM, PSM, PSMP, CCP, and privileged onboarding
• Design and maintain EPM policies, Sets, Rules, Application Control
• Manage endpoint onboarding, agent deployment, policy tuning, and exceptions
• Drive password management, session monitoring, and privileged access governance
• Troubleshoot PAM and EPM, act as L3/L4 escalation
• Develop automation using PowerShell, REST APIs, and Python
• Integrate CyberArk with AD, Entra ID, ServiceNow, SIEM, Azure, AWS, GCP
• Lead PAM/EPM implementations, upgrades, M&A integrations, improvements
• Review and optimize EPM policies to reduce false positives
• Maintain runbooks, SOPs, compliance evidence, audit documentation
• Mentor engineers and governance activities

Conocimientos

CyberArk Privilege Cloud

CyberArk Endpoint Manager (EPM)

Active Directory

Entra ID

Azure

ServiceNow

PowerShell

REST APIs

Windows & Linux Administration

Incident/Change/Problem Management

English (B2+)

Educación

CyberArk Sentry / CDE – Privilege Cloud, CDE – EPM

ITIL Foundation

Descripción del empleo

Job Summary

Lead the engineering, administration, implementation, and support of CyberArk Privilege Cloud (PAM) and Endpoint Privilege Manager (EPM). Act as the technical lead for PAM initiatives, automation, operational excellence, and governance.

Job Summary

Lead the engineering, administration, implementation, and support of CyberArk Privilege Cloud (PAM) and Endpoint Privilege Manager (EPM). Act as the technical lead for PAM initiatives, automation, operational excellence, and governance.

Responsibilities

• Lead administration and support of CyberArk Privilege Cloud and EPM platforms.
• Manage Safes, Platforms, CPM, PSM, PSMP, CCP, and privileged account onboarding.
• Design and maintain EPM policies, Sets, Rules, Application Control, and Privilege Elevation policies.
• Manage endpoint onboarding, agent deployment, policy tuning, and exception handling.
• Drive password management, session monitoring, and privileged access governance.
• Troubleshoot PAM and EPM platform issues and act as L3/L4 escalation point.
• Develop automation using PowerShell, REST APIs, and Python.
• Integrate CyberArk with Active Directory, Entra ID, ServiceNow, SIEM, Azure, AWS, and GCP.
• Lead PAM/EPM implementation, upgrades, M&A integrations, and operational improvements.
• Review, tune, and optimize EPM policies to reduce false positives and user impact.
• Maintain runbooks, SOPs, KB articles, compliance evidence, and audit documentation.
• Mentor engineers and support service maturity, reporting, and governance activities.

Skills

Skills and Experience

• English Level B2+
• CyberArk Privilege Cloud (Identity Administration,PVWA, CPM, PSM, PSMP, CCP)
• CyberArk Endpoint Privilege Manager (EPM)
• Active Directory, Entra ID, Azure
• ServiceNow
• PowerShell, REST APIs
• Windows & Linux Administration
• Incident, Change, and Problem Management

Education / Professional Experience/ Qualifications

• Preferred Certifications
• CyberArk Sentry / Certified Delivery Engineer ( CDE – Privilege Cloud , CDE – EPM )
• ITIL Foundation
• Preferred Experience
• Privilege Cloud SaaS Operations
• EPM Policy Design & Administration
• PAM/EPM M&A Integrations
• Automation & Reporting
• Global Support and Governance Models