Privileged Access Management (Pam) Engineer

Optiwisers; Valencia; Presencial; EUR 55.000 - 90.000; Jornada completa

Descripción de la vacante

Optiwisers solicita un PAM Engineer para desplegar y gestionar soluciones de Privileged Access Management (PAM) en entornos on-prem y cloud, con foco en CyberArk y gestión de credenciales. El candidato coordinará onboarding, JIT, rotación de contraseñas y cumplimiento de políticas de seguridad.

Se requieren 4–8 años de experiencia en PAM/IAM y habilidades en PowerShell, Python y REST APIs, con capacidad de trabajar en equipos multi‑funcionales y entornos Windows/Linux.

Formación

• Titulación universitaria en informática o seguridad.
• 4–8 años de experiencia en IT Security, IAM o PAM Engineering.
• Experiencia práctica con CyberArk PAM Suite (Vault/CPM/PSM/PVWA).
• Conocimiento de JIT y Privileged Session Management.
• Integración de PAM con IAM (SailPoint/Saviynt/Entra ID).
• Gestión de privilegios en entornos cloud (Azure/AWS).
• Automatización con PowerShell, Python y REST APIs.

Responsabilidades

• Instalar, configurar y mantener componentes CyberArk (Vault, PVWA, CPM, PSM, PTA, Conjur).
• Onboard de cuentas privilegiadas en Windows, Linux, Oracle y SQL.
• Gestión del ciclo de vida de cuentas privilegiadas y rotación de credenciales.
• Implementar JIT y control de sesiones privilegiadas.
• Asegurar cumplimiento de políticas de contraseñas y almacenamiento seguro de credenciales.
• Gestionar secretos de aplicaciones con Conjur o similares.
• Auditar cuentas no rotativas y cuentas compartidas; apoyar recertificación y controles.
• Proporcionar soporte L2/L3 para incidentes PAM y consultas de servicio.
• Integrar CyberArk con AD, Entra ID, IAM, SIEM y ServiceNow.
• Automatizar procesos PAM con PowerShell/Python/REST para reducir esfuerzo.

Conocimientos

PAM Engineering

CyberArk PAM

Scripting

PowerShell

Python

REST APIs

IAM

Windows

Linux

Cloud (Azure/AWS)

ITSM/ServiceNow

Active Directory

Educación

Bachelor's degree in Computer Science or Information Security

Herramientas

CyberArk Vault

PVWA

CPM

PSM

PVWA

Conjur

Descripción del empleo

Descripción del trabajo

Privileged Access Management (PAM) Engineer | Valencia

Location: Valencia, Spain

Work model: on-site Valencia office

Experience: 4 to 8+ years in PAM, IAM, or IT Security Engineering

Position: Full-time

Contract: B2B / Freelance

Languages: English & Spanish

Summary

We’re looking for a PAM Engineer to deploy, administer, and manage enterprise Privileged Access Management (PAM) solutions across on-premises and cloud environments. You’ll focus on CyberArk, privileged account onboarding, secrets management, Just-in-Time (JIT) access, automation, and governance, ensuring secure management of privileged identities and compliance with security standards.

Key Responsibilities

• Install, configure, and maintain CyberArk components including Vault, PVWA, CPM, PSM, PTA, and Conjur
• Perform privileged account onboarding across Windows, Linux, Oracle, SQL, cloud, and application environments, ensuring secure vaulting and proper classification
• Manage the end-to-end privileged account lifecycle, including inventory, validation, ownership mapping, approvals, and onboarding
• Implement and manage Just-in-Time (JIT) privileged access and session management controls
• Enforce password and credential management policies, including automated password rotation, complexity enforcement, and secure credential storage
• Manage application secrets using CyberArk Conjur or equivalent secrets management solutions
• Identify and manage service accounts, shared accounts, and non-rotating accounts, applying appropriate security controls and risk mitigation
• Monitor password compliance and remediate accounts that do not meet defined rotation and policy standards
• Provide Level 2/3 support for PAM-related incidents and service requests
• Troubleshoot CyberArk integrations with Active Directory, Entra ID (Azure AD), IAM, SIEM, and ServiceNow
• Perform regular health checks, system monitoring, patching, and upgrades of CyberArk infrastructure
• Automate PAM processes using PowerShell, Python, REST APIs, and psPAS to reduce manual effort
• Support bulk onboarding and large-scale privileged account management through automation and standardized methods
• Design and support integrations between PAM and enterprise IAM systems such as SailPoint, Saviynt, and Entra ID
• Maintain SOPs, onboarding procedures, runbooks, and automation scripts
• Collaborate with application, infrastructure, and cloud teams to enforce least privilege and secure credential usage
• Participate in audit and compliance activities, providing evidence, reporting, and demonstrating control effectiveness
• Support PAM governance activities, including account recertification, ownership validation, and compliance monitoring

Required Skills

• Bachelor’s degree in Computer Science, Information Security, or related field
• 4–8 years of experience in IT Security, IAM, or PAM Engineering
• Strong hands‑on experience with CyberArk PAM Suite (Vault, CPM, PSM, PVWA)
• Experience with CyberArk Conjur or other enterprise secrets management solutions
• Strong understanding of Just-in-Time (JIT) access and Privileged Session Management
• Experience integrating PAM with IAM platforms (e.g., SailPoint, Saviynt, Entra ID / Azure AD)
• Experience managing privileged access in cloud environments (Azure, AWS)
• Strong understanding of Windows, Linux, Active Directory, and database systems (Oracle, SQL)
• Strong scripting and automation experience (PowerShell, Python, REST APIs)
• Experience with ITSM tools such as ServiceNow and incident/change management processes
• Knowledge of security controls, audit frameworks, and compliance standards
• Strong analytical and troubleshooting abilities
• Ability to work independently and within cross-functional teams
• Excellent communication skills with both technical and non-technical stakeholders
• Attention to detail and commitment to security best practices

Nice to Have

• CyberArk Defender / Sentry certification
• Experience implementing Conjur in DevOps / CI-CD environments
• Experience with Privileged Threat Analytics (PTA) or advanced monitoring tools
• Exposure to container platforms (Kubernetes, OpenShift) and secrets management
• Familiarity with Zero Trust security architecture

If youre passionate about CyberArk, Privileged Access Management, automation, and enterprise security, wed love to hear from you.

#CyberArk #PAM #IAM #PrivilegedAccessManagement #CyberSecurity #InformationSecurity #CloudSecurity #EntraID #ZeroTrust #Hiring

Crear una alerta de empleo para esta búsqueda