Cybersecurity Engineer / CyberArk (PAM)

Motivus; México; Remote; MXN 600,000 - 900,000; Full time

Job summary

Motivus is seeking an Engineer specializing in Privileged Access Management (PAM) and Secrets Management to lead the implementation and strategic oversight of technologies during a large-scale corporate divestiture. The role will focus on secure separation, migration, and ongoing protection of privileged credentials and confidential secrets for the divested entity.

You will design, deploy, and manage CyberArk and HashiCorp Vault environments, enforce least privilege, integrate with CI/CD and

Qualifications

• 3–5 years of information security experience focused on PAM and secrets management.
• Fluent English (conversational) required.
• Experience designing, implementing, and managing CyberArk.
• Experience with HashiCorp Vault: deployment, policy management, integration.
• Understanding of privileged access, encryption, key management, and credential management.
• Scripting skills (Python, PowerShell, HCL) for automation and integration.

Responsibilities

• Develop and execute strategies for secure separation of PAM and Vault environments during divestiture.
• Plan and implement solutions ensuring integrity, confidentiality, and availability of privileged credentials and secrets.
• Establish PAM and secrets management policies, access controls, and integrations for the divested environment.
• Design, implement, configure, and maintain CyberArk PAM system.

Skills

Privileged Access Management

HashiCorp Vault

CyberArk

Python

PowerShell

HCL

CI/CD

Kubernetes

ACLs

OPA

Tools

CyberArk

HashiCorp Vault

Kubernetes

Job description

We are seeking an Engineer specializing in Privileged Access Management (PAM) and Secrets Management to lead the implementation, administration, and strategic oversight of technologies within the context of a large-scale corporate divestiture. The role will focus on ensuring the secure separation, migration, and ongoing protection of privileged credentials and confidential secrets for the entity being spun off from the organization.

We are seeking an Engineer specializing in Privileged Access Management (PAM) and Secrets Management to lead the implementation, administration, and strategic oversight of technologies within the context of a large-scale corporate divestiture. The role will focus on ensuring the secure separation, migration, and ongoing protection of privileged credentials and confidential secrets for the entity being spun off from the organization.

Your Role and Responsibilities

• Develop and execute strategies for the secure separation of CyberArk and HashiCorp Vault environments, including policies, vaults, secrets, and privileged accounts for the business units involved in the divestiture.
• Plan and implement robust solutions that ensure the integrity, confidentiality, and availability of privileged credentials and secrets throughout the entire divestiture process.
• Oversee the establishment of new PAM and secrets management policies, access controls, and integrations for the environment resulting from the divestiture.
• Design, implement, configure, and maintain the CyberArk Privileged Access Management system.
• Manage the onboarding of privileged accounts, policy creation, session monitoring, and audit logging within the CyberArk platform.
• Ensure secure credential rotation, “just-in-time” access, and the application of the “least privilege” principle for administrative accounts across various platforms.
• Design, implement, configure, and manage HashiCorp Vault for dynamic secret generation, encryption-as-a-service, and the secure storage of secrets for applications and infrastructure.
• Integrate HashiCorp Vault with CI/CD workflows, container orchestration platforms (e.g., Kubernetes), and cloud services to provide automated and secure delivery of secrets.
• Define and enforce access policies (such as ACLs or OPA) within Vault to ensure that only authorized entities can access sensitive data.
• Implement and enforce security best practices for PAM (Privileged Access Management) and secrets management configurations, ensuring alignment with corporate security policies, regulatory requirements, and data governance standards throughout the divestiture process.
• Monitor the health, performance, and security events of PAM and secrets management systems, responding proactively to incidents and anomalies.
• Develop and maintain comprehensive documentation, architecture diagrams, runbooks, and standard operating procedures (SOPs) for the PAM and secrets management infrastructure.
• Integrate PAM and secrets management solutions with various identity providers, directory services, SIEM systems, and other security tools.

REQUIREMENTS

• 3 to 5 years of experience in information security, with a specific focus on Privileged Access Management (PAM) and secrets management.
• Proficiency in conversational English (Required).
• Experience in the design, implementation, and management of CyberArk.
• Experience with HashiCorp Vault, including its deployment, configuration, policy management, and integration with various platforms.
• Understanding of security principles related to privileged access, credential management, encryption, and key management.
• Proficiency in scripting languages (e.g., Python, PowerShell, HCL) for automation, integration, and administrative tasks.

Working at Motivus

• Guild community: You’re part of the [Data & AI / Backend / Cloud] Guild — a community of practitioners in your domain. Structured learning, peer review, and certifications happen here, not in isolation.
• Outcome accountability: Your work connects directly to a client result. We don’t measure activity — we measure delivery.
• AI in your workflow: Through AI Champions and Guild initiatives, you’ll actively use and shape how AI tools are applied to engineering work — not just hear about it in a townhall.
• Defined career path: Structured progression from individual contributor to technical lead to Guild leadership, with certifications and milestones that are visible, not arbitrary.

Location Mexico