CyberArk PAM & EPM Lead Engineer

Grant Thornton International; Województwo wielkopolskie; Hybrid; PLN 120,000 - 180,000; Full time

Benefits offered by this job

Hybrid work model

Private medical care

MultiSport

Benefits platform

International environment

Job summary

Grant Thornton International is seeking an experienced CyberArk PAM/EPM lead to manage Privilege Cloud and Endpoint Privilege Manager platforms. You will design policies, onboard privileged accounts, and drive automation to improve security and operational excellence.

You will mentor engineers, maintain runbooks and SOPs, and collaborate with global teams to support governance and audits. This role offers a hybrid office setup in Poland.

Qualifications

• CyberArk Privilege Cloud/EPM administration experience.
• Proficiency with PowerShell and REST APIs.
• Experience with incident, change, and problem management.
• ITIL Foundation certification preferred.

Responsibilities

• Lead administration and support of CyberArk Privilege Cloud and EPM platforms.
• Manage Safes, Platforms, CPM, PSM, PSMP, CCP, and privileged onboarding.
• Design and maintain EPM policies, Sets, Rules, Application Control, and Privilege Elevation policies.
• Drive automation using PowerShell, REST APIs, and Python.
• Maintain runbooks, SOPs, KB articles, and audit documentation.
• Mentor engineers and governance activities.

Skills

CyberArk Privilege Cloud

CyberArk Endpoint Privilege Manager (E

Education

ITIL Foundation

Job description

Lead the engineering, administration, implementation, and support of CyberArk Privilege Cloud (PAM) and Endpoint Privilege Manager (EPM). Act as the technical lead for PAM initiatives, automation, operational excellence, and governance.

Key Responsibilities

Lead administration and support of CyberArk Privilege Cloud and EPM platforms.

Manage Safes, Platforms, CPM, PSM, PSMP, CCP, and privileged account onboarding.

Design and maintain EPM policies, Sets, Rules, Application Control, and Privilege Elevation policies.

Manage endpoint onboarding, agent deployment, policy tuning, and exception handling.

Drive password management, session monitoring, and privileged access governance.

Troubleshoot PAM and EPM platform issues and act as L3/L4 escalation point.

Develop automation using PowerShell, REST APIs, and Python.

Integrate CyberArk with Active Directory, Entra ID, ServiceNow, SIEM, Azure, AWS, and GCP.

Lead PAM/EPM implementation, upgrades, M&A integrations, and operational improvements.

Review, tune, and optimize EPM policies to reduce false positives and user impact.

Maintain runbooks, SOPs, KB articles, compliance evidence, and audit documentation.

Mentor engineers and support service maturity, reporting, and governance activities.

Required Skills

CyberArk Privilege Cloud (Identity Administration,PVWA, CPM, PSM, PSMP, CCP)

CyberArk Endpoint Privilege Manager (EPM)

ServiceNow

PowerShell, REST APIs

Incident, Change, and Problem Management

Preferred Certifications

ITIL Foundation

Preferred Experience

Privilege Cloud SaaS Operations

EPM Policy Design & Administration

PAM/EPM M&A Integrations

Automation & Reporting

Global Support and Governance Models

What we offer:

• Hybrid working model (2 days in the office and 3 days working remotely).
• Stable employment with an employment contract, private medical care, and a benefits package including MultiSport and a benefits platform.
• Opportunity to work in an international environment and collaborate with experienced Grant Thornton experts and professionals from around the world.
• A culture based on teamwork, trust, and knowledge sharing.
• A well-structured onboarding program to support a smooth start and successful integration into your new role.
• Clear career development paths and access to learning and certification programs.
• Access to training platforms and tools that support professional growth.
• An inclusive workplace that welcomes people with disabilities.
• A modern office in Poznań, located in Malta Office Park.

What is the dress code at Grant Thornton?

Will I always receive feedback after a job interview?

What are the possible forms of cooperation?