CyberArk PAM Engineer — Privileged Access Specialist

Galderma; Kraków; On-site; PLN 190,000 - 260,000; Full time

Benefits offered by this job

Competitive compensation

Bonus structure

Onsite work culture

Job summary

Galderma Krakow is seeking a Privileged Access Specialist (CyberArk) to architect and continuously improve the PAM framework across our global IT and OT environments. You will be the technical authority for CyberArk, ensuring privileged credentials and session security are managed robustly in a regulated setting, partnering with IT, audit and business stakeholders.

This role offers a chance to contribute to a leading dermatology company and advance your career within a collaborative,

Qualifications

• Minimum 5 years in privileged access management or IT security.
• At least 3 years hands-on with CyberArk PAS/Privilege Cloud in production.
• Strong experience with Vault, CPM, PSM and PVWA administration.
• Onboard privileged accounts across Windows, Unix/Linux, databases, cloud and OT environments.
• Develop and maintain custom CPM plugins and PSM connectors for non-standard targets.
• Fluent English; strong communication with stakeholders.

Responsibilities

• Administer and operate Galderma’s CyberArk platform, including Vault, CPM, PSM, PVWA, HTML5 Gateway, PTA, PSMP and Identity/SIA components.
• Lead platform lifecycle activities: upgrades, patching, disaster recovery testing, backup and restore, certificate management, and system hardening.
• Configure and maintain privileged access policies including password rotation, reconciliation, session isolation and recording, exclusive access and dual control workflows.
• Onboard privileged accounts across Windows, Unix/Linux, databases, network devices, cloud environments, SaaS applications, and OT/manufacturing systems.
• Develop and maintain custom integrations with CPM plugins and PSM connectors for non-standard targets.
• Support privileged session inspection.

Skills

Privileged access management

CyberArk platform engineering

Session security

PowerShell scripting

REST API integration

Python

Automation

Auditing & governance

Education

Higher education in IT security

Tools

Vault

CPM

PSM

PVWA

HTML5 Gateway

PSMP

Identity/SIA

Job description

Galderma Krakow is seeking a Privileged Access Specialist (CyberArk) to architect and continuously improve the PAM framework across our global IT and OT environments. You will be the technical authority for CyberArk, ensuring privileged credentials and session security are managed robustly in a regulated setting, partnering with IT, audit and business stakeholders.

This role offers a chance to contribute to a leading dermatology company and advance your career within a collaborative,