PAM Operations & Platform Engineer

ITConnect Sp. z o.o.; Warszawa; Hybrid; PLN 120,000 - 180,000; Full time

Job summary

ITConnect Sp. z o.o. seeks a hands-on PAM operations engineer to manage Privilege Cloud and Idira PAM implementations across the enterprise.

You will perform health checks, incident resolution, password management, and integration work with AD/Entra ID, SSO, MFA, and related security tooling.

Qualifications

• Hands-on experience supporting or administering CyberArk/Idira Privilege Cloud environments.
• Strong practical knowledge of privileged account management and safes.
• Experience with PAM integrations, APIs, and automation.

Responsibilities

• Monitor, support, and maintain the PAM environment.
• Perform health checks, incident resolution, and service request fulfilment.
• Troubleshoot privileged accounts, password rotation, and policy issues.
• Manage Privilege Cloud connectors, patching, and certificate management.
• Onboard privileged accounts, target systems, safes, and policies.
• Configure and test PAM solutions and enhancements.
• Support rollout of WPM, EPM, Vendor PAM, and other Idira PAM capabilities.
• Contribute to automation and integrations using APIs and PowerShell.
• Participate in major incident management, root cause analysis, and DR testing.
• Maintain operational docs, troubleshooting guides, and audit records.
• Collaborate with infrastructure, security, identity, and architecture teams.

Skills

CyberArk

Idira PAM

Windows

Linux

Active Directory

Entra ID

SSO

MFA

PowerShell

SSH

Networking

Tools

PowerShell

ServiceNow

SIEM

SSH

VPN

Active Directory

Entra ID

Job description

This hands-on operational assignment supports the secure management of privileged access across the organization, focused on administration, support, maintenance, and continuous improvement of the Idira PAM platform, with Privilege Cloud as the core solution.

The assignment also includes implementing and configuring new PAM capabilities based on designs and standards provided by PAM architects, as well as supporting Workforce Password Management, Endpoint Privilege Management, Vendor PAM, and other PAM technologies as they are introduced.

• Monitor, support, and maintain the Privileged Access Management (PAM) environment.
• Perform health checks, incident resolution, service request fulfilment, and operational support activities.
• Troubleshoot privileged accounts, password rotation and reconciliation issues, safes, policies, session management, authentication, integrations, and connectivity challenges.
• Manage and maintain Privilege Cloud connector servers, including patching, upgrades, certificate management, recovery, and redeployment.
• Onboard and maintain privileged accounts, target systems, safes, platforms, and policies.
• Configure and test architect-approved PAM solutions and enhancements.
• Support the rollout and ongoing operation of WPM, EPM, Vendor PAM, and other Idira PAM capabilities.
• Contribute to automation and integrations using APIs, PowerShell, and other supported technologies.
• Participate in major incident management, root cause analysis, disaster recovery testing, and break-glass exercises.
• Maintain operational documentation, troubleshooting guides, compliance evidence, and audit records.
• Collaborate closely with infrastructure, security, identity, application, and architecture teams.
• 3-5 years of hands-on experience supporting or administering CyberArk/Idira Privilege Cloud environments.
• Strong practical knowledge of privileged account management.
• Strong practical knowledge of safes and access permissions.
• Strong practical knowledge of password management and rotation.
• Strong practical knowledge of CPM, PSM, and session management.
• Strong practical knowledge of PAM policies and platform administration.
• Experience managing and troubleshooting Privilege Cloud connectors and supporting infrastructure.
• Knowledge of Windows and Linux environments.
• Knowledge of Active Directory and Entra ID.
• Knowledge of SSO and MFA technologies.
• Knowledge of DNS, certificates, firewalls, and networking.
• Understanding of PAM business continuity, disaster recovery, and emergency access processes.
• Ability to independently implement, configure, and test solutions based on technical designs.
• Experience working within incident, problem, and change management processes.
• Hands-on experience with multiple Idira PAM capabilities, including Privilege Cloud, Workforce Password Management (WPM), Endpoint Privilege Management (EPM), and Vendor PAM.
• Experience with PAM integrations, APIs, and automation.
• Experience working within a GxP-regulated environment, ideally within the pharmaceutical or life sciences industry.
• Understanding of change control processes.
• Understanding of validation and qualification requirements.
• Understanding of audit trails and compliance documentation.
• Experience with ServiceNow, SIEM integrations, PowerShell, Linux, and SSH.
• Relevant CyberArk or Idira certifications.