CyberArk PAM Engineer: Privileged Access Expert

Galderma Services Poland sp. z o.o.; Kraków; On-site; PLN 180,000 - 320,000; Full time

Benefits offered by this job

Competitive compensation package

Bonus structure

Extended benefits

Onsite work culture

Career path

Job summary

Galderma is seeking an experienced Privileged Access Specialist (CyberArk) for Krakow, Poland, onsite three days a week. You will architect and continuously improve the PAM framework, serve as the technical authority for CyberArk components, and collaborate with IT, audit and business stakeholders to ensure secure privileged access controls.

You will manage Vault/CPM/PSM/PVWA, lead lifecycle activities, onboard accounts across diverse environments, and integrate with SIEM for enhanced security

Qualifications

• Higher education in Information Technology, Information Security or equivalent experience.

Responsibilities

• Administer and operate Galderma’s CyberArk platform, including Vault, CPM, PSM, PVWA, HTML5 Gateway, PTA, PSMP, and Identity/SIA components.
• Lead platform lifecycle activities: upgrades, patching, disaster recovery testing, backup and restore, certificate management, and system hardening following industry standards.
• Configure and maintain privileged access policies, including password rotation, reconciliation, session isolation and recording, exclusive access and dual control workflows.
• Onboard privileged accounts across Windows, Unix/Linux, databases, network devices, cloud environments, SaaS applications, and OT/manufacturing systems.
• Develop and maintain custom integrations with CPM plugins and PSM connectors for non-standard targets and business-critical platforms.
• Support privileged session inspection, monitoring, and recording, integrating with SIEM to enhance detection of privileged misuse.
• Manage secrets and machine identities, including Conjur/Secrets Hub, Credential Providers and API key lifecycles, with a focus on eliminating hard-coded credentials.
• Contribute to PAM architecture and automation, including onboarding and compliance reporting through REST API, PowerShell and version control best practices.
• Support audit and compliance requirements by providing evidence and documentation for privileged access controls, access reviews, session coverage, and remediation actions.
• Maintain operational documentation and support incident response, forensic review and break-glass procedures with the IAM team.

Skills

Privileged access management

CyberArk platform engineering

PowerShell scripting

REST API integration

Python

Audit/compliance

Fluent English

Education

Bachelor's degree in Information Technology or Information Security

Tools

CyberArk PAS

Vault

PSM

PVWA

Conjur/Secrets Hub

SIA/just-in-time access tooling

CI/CD pipelines

Job description

Galderma is seeking an experienced Privileged Access Specialist (CyberArk) for Krakow, Poland, onsite three days a week. You will architect and continuously improve the PAM framework, serve as the technical authority for CyberArk components, and collaborate with IT, audit and business stakeholders to ensure secure privileged access controls.

You will manage Vault/CPM/PSM/PVWA, lead lifecycle activities, onboard accounts across diverse environments, and integrate with SIEM for enhanced security