CyberArk PAM & EPM Lead Engineer

Grant Thornton International; Poznań; Hybrid; PLN 170,000 - 260,000; Full time

Benefits offered by this job

Hybrid work model

Private medical care

MultiSport

Benefits platform

International environment

Team collaboration

Onboarding program

Career development

Training platforms

Inclusive workplace

Modern Poznań office

Job summary

Grant Thornton International is seeking a lead for CyberArk Privilege Cloud (PAM) and Endpoint Privilege Manager (EPM) administration and governance. You will drive automation, policy design, and operational excellence while mentoring engineers and coordinating with global teams.

The role requires hands-on experience with PAM/EPM platforms, scripting in PowerShell and Python, and strong cross-domain integration skills including Active Directory, Entra ID, Azure, AWS, GCP, and SIEM.

Qualifications

• Experience in leading CyberArk PAM/EPM operations and governance.

Responsibilities

• Lead administration and support of CyberArk Privilege Cloud and EPM platforms.
• Manage Safes, Platforms, CPM, PSM, PSMP, CCP, and privileged account onboarding.
• Design and maintain EPM policies, Sets, Rules, Application Control, and Privilege Elevation policies.
• Manage endpoint onboarding, agent deployment, policy tuning, and exception handling.
• Drive password management, session monitoring, and privileged access governance.
• Troubleshoot PAM and EPM platform issues and act as L3/L4 escalation point.
• Develop automation using PowerShell, REST APIs, and Python.
• Integrate CyberArk with Active Directory, Entra ID, ServiceNow, SIEM, Azure, AWS, and GCP.
• Lead PAM/EPM implementation, upgrades, M&A integrations, and operational improvements.
• Review, tune, and optimize EPM policies to reduce false positives and user impact.
• Maintain runbooks, SOPs, KB articles, compliance evidence, and audit documentation.
• Mentor engineers and support service maturity, reporting, and governance activities.

Skills

CyberArk Privilege Cloud

CyberArk EPM

PowerShell

REST APIs

Python

ServiceNow

Incident Mgmt

Automation

Tools

Active Directory

Entra ID

Azure

AWS

GCP

SIEM

Job description

Lead the engineering, administration, implementation, and support of CyberArk Privilege Cloud (PAM) and Endpoint Privilege Manager (EPM). Act as the technical lead for PAM initiatives, automation, operational excellence, and governance.

Key Responsibilities

Lead administration and support of CyberArk Privilege Cloud and EPM platforms.

Manage Safes, Platforms, CPM, PSM, PSMP, CCP, and privileged account onboarding.

Design and maintain EPM policies, Sets, Rules, Application Control, and Privilege Elevation policies.

Manage endpoint onboarding, agent deployment, policy tuning, and exception handling.

Drive password management, session monitoring, and privileged access governance.

Troubleshoot PAM and EPM platform issues and act as L3/L4 escalation point .

Develop automation using PowerShell, REST APIs, and Python.

Integrate CyberArk with Active Directory, Entra ID, ServiceNow, SIEM, Azure, AWS, and GCP.

Lead PAM/EPM implementation, upgrades, M&A integrations, and operational improvements.

Review, tune, and optimize EPM policies to reduce false positives and user impact.

Maintain runbooks, SOPs, KB articles, compliance evidence, and audit documentation.

Mentor engineers and support service maturity, reporting, and governance activities.

Required Skills

CyberArk Privilege Cloud ( Identity Administration, PVWA , CPM, PSM, PSMP, CCP)

CyberArk Endpoint Privilege Manager (EPM)

ServiceNow

PowerShell, REST APIs

Incident, Change, and Problem Management

Preferred Certifications

ITIL Foundation

Preferred Experience

Privilege Cloud SaaS Operations

EPM Policy Design & Administration

PAM/EPM M&A Integrations

Automation & Reporting

Global Support and Governance Models

What we offer:

• Hybrid working model (2 days in the office and 3 days working remotely).
• Stable employment with an employment contract, private medical care, and a benefits package including MultiSport and a benefits platform.
• Opportunity to work in an international environment and collaborate with experienced Grant Thornton experts and professionals from around the world.
• A culture based on teamwork, trust, and knowledge sharing.
• A well-structured onboarding program to support a smooth start and successful integration into your new role.
• Clear career development paths and access to learning and certification programs.
• Access to training platforms and tools that support professional growth.
• An inclusive workplace that welcomes people with disabilities.
• A modern office in Poznań, located in Malta Office Park.