CyberArk PAM Engineer

Avance Consulting; Zaandam; On-site; EUR 70,000 - 95,000; Full time

Job summary

Avance Consulting seeks a CyberArk PAM Engineer with hands-on experience implementing, configuring, and supporting CyberArk Privileged Access Management solutions. You will administer PAS components (EPV, PVWA, CPM, PSM, PSMP) and work with advanced modules (AAM/AIM, CCP).

Responsibilities include privileged account onboarding, REST API automation, and ensuring governance with PAM access reviews across Windows, Linux, databases, SAP, and cloud services.

Qualifications

• Hands-on CyberArk PAM/PAS experience is required.
• Experience with onboarding privileged accounts and applications.
• Strong knowledge of AD and Azure Entra ID integration.

Responsibilities

• Administer and support CyberArk PAS components (EPV, PVWA, CPM, PSM, PSMP).
• Work with Advanced Modules such as AAM/AIM and CCP.
• Perform privileged account onboarding and DNA scans; support governance and reviews.

Skills

CyberArk PAM

PAM/PAS

Active Directory

Azure Entra ID

CyberArk REST APIs

AutoIt

Tools

AutoIt

Job description

We are looking for a CyberArk PAM Engineer with hands‑on experience in implementing, configuring, and supporting CyberArk Privileged Access Management solutions.

Key Responsibilities

• Administer and support CyberArk PAS components including EPV, PVWA, CPM, PSM, and PSMP.
• Work with CyberArk Advanced Modules such as AAM/AIM and CCP.
• Perform privileged account and application onboarding.
• Create and configure CyberArk Connection Components, including custom components using AutoIt.
• Support integrations with Active Directory, Azure/Entra ID, SAML, LDAP/LDAPS, SIEM, SMTP, and SNMP.
• Work with CyberArk REST APIs for automation and integrations.
• Perform DNA scans, PAS Reporter activities, and Vault data exports.
• Support PAM access reviews and privileged‑access governance.
• Manage accounts across Windows, Linux/UNIX, network devices, databases, SAP, web applications, Azure, and Domain Controllers.
• Prepare technical documentation such as HLD, DTD, SOP, and KEDB.
• Troubleshoot CyberArk‑related incidents and provide L2/L3 support.
• Work with IAM technologies such as SailPoint, ISIM, Azure SSO, and ISAM.

Required Skills

• Strong hands‑on experience with CyberArk PAM/PAS.
• Good knowledge of PAM, IAM, Active Directory, and Azure/Entra ID.
• Experience with CyberArk integrations and application onboarding.
• Good troubleshooting and communication skills.

Mandatory Skill: CyberArk