Senior CyberArk PAM Engineer: Vault & IAM Security

Banco Santander SA; Santiago de Querétaro; On-site; MXN 900,000 - 1,300,000; Full time

Job summary

Banco Santander SA in Mexico seeks a Senior CyberArk Engineer to architect, deploy, and maintain privileged access security using CyberArk PAS across on-prem and cloud, protecting critical systems and credentials.

You will implement EPV, PSM, CPM, and connectors, enforce PAM governance, automate onboarding with REST, PowerShell, and Python, and collaborate with IAM and security teams on incident response and hardening.

Qualifications

• 5–8+ years in information security or IAM.
• 3–5+ years of hands-on CyberArk engineering.
• Strong understanding of privileged access management principles.
• Proficiency with PowerShell and Python; Windows/Linux admin.
• Experience with LDAP/AD, MFA integrations, and basic networking.

Responsibilities

• Design, deploy, configure, and maintain the full CyberArk PAS suite (EPV, PSM, PSM-SSH, CPM, PTA).
• Implement and maintain CyberArk safes, policies, connectors; integrate with LDAP/AD, SIEM, and cloud providers.
• Develop privileged access governance and threat modeling aligned with SOX, GLBA, NYDFS.
• Automate onboarding of privileged accounts and systems using REST, PowerShell, and Python.
• Troubleshoot vaulting, credential, and session issues; perform upgrades, patches, health checks, and hardening.
• Collaborate with IAM, security operations, risk, and compliance teams; create runbooks and guides.

Skills

PowerShell

Python

Windows administration

Linux administration

Active Directory

LDAP

MFA integrations

CyberArk PAS

Tools

CyberArk EPV

PSM

PSM-SSH

Central Policy Manager (CPM)

Privileged Threat Analytics (PTA)

REST APIs

Cloud platforms (AWS, Azure, GCP)

Job description

Banco Santander SA in Mexico seeks a Senior CyberArk Engineer to architect, deploy, and maintain privileged access security using CyberArk PAS across on-prem and cloud, protecting critical systems and credentials.

You will implement EPV, PSM, CPM, and connectors, enforce PAM governance, automate onboarding with REST, PowerShell, and Python, and collaborate with IAM and security teams on incident response and hardening.