Support the secure management of privileged access across the organization in a hands-on operational role focused on administration, support, maintenance, and continuous improvement of the Idira PAM platform, with Privilege Cloud as the core solution.
Implement and configure new PAM capabilities based on designs and standards provided by PAM architects, while supporting Workforce Password Management (WPM), Endpoint Privilege Management (EPM), Vendor PAM, and other PAM technologies as they are introduced.
- Monitor, support, and maintain the Privileged Access Management (PAM) environment.
- Perform health checks, incident resolution, service request fulfilment, and operational support activities.
- Troubleshoot privileged accounts, password rotation and reconciliation issues, safes, policies, session management, authentication, integrations, and connectivity challenges.
- Manage and maintain Privilege Cloud connector servers, including patching, upgrades, certificate management, recovery, and redeployment.
- Onboard and maintain privileged accounts, target systems, safes, platforms, and policies.
- Configure and test architect-approved PAM solutions and enhancements.
- Support the rollout and ongoing operation of WPM, EPM, Vendor PAM, and other Idira PAM capabilities.
- Contribute to automation and integrations using APIs, PowerShell, and other supported technologies.
- Participate in major incident management, root cause analysis, disaster recovery testing, and break-glass exercises.
- Maintain operational documentation, troubleshooting guides, compliance evidence, and audit records.
- Collaborate closely with infrastructure, security, identity, application, and architecture teams.
- 3-5 years of hands-on experience supporting or administering CyberArk/Idira Privilege Cloud environments.
- Strong practical knowledge of privileged account management.
- Strong practical knowledge of safes and access permissions.
- Strong practical knowledge of password management and rotation.
- Strong practical knowledge of CPM, PSM, and session management.
- Strong practical knowledge of PAM policies and platform administration.
- Experience managing and troubleshooting Privilege Cloud connectors and supporting infrastructure.
- Knowledge of Windows and Linux environments.
- Knowledge of Active Directory and Entra ID.
- Knowledge of SSO and MFA technologies.
- Knowledge of DNS, certificates, firewalls, and networking.
- Understanding of PAM business continuity, disaster recovery, and emergency access processes.
- Ability to independently implement, configure, and test solutions based on technical designs.
- Experience working within incident, problem, and change management processes.
- Hands-on experience with multiple Idira PAM capabilities, including Privilege Cloud, Workforce Password Management (WPM), Endpoint Privilege Management (EPM), and Vendor PAM.
- Experience with PAM integrations, APIs, and automation.
- Experience working within a GxP-regulated environment, ideally within the pharmaceutical or life sciences industry.
- Understanding of change control processes.
- Understanding of validation and qualification requirements.
- Understanding of audit trails and compliance documentation.
- Experience with ServiceNow, SIEM integrations, PowerShell, Linux, and SSH.
- Relevant CyberArk or Idira certifications.