PAM Operations & Platform Engineer

Optiveum; Warszawa; Hybrid; PLN 169,000 - 211,000; Full time

Job summary

Optiveum is seeking a PAM Operations & Platform Engineer to join a pharmaceutical client. The role covers administration, support and continuous improvement of CyberArk/Idira PAM, with Privilege Cloud as the core solution. It includes WPM, EPM, Vendor PAM and related PAM technologies.

You will implement PAM capabilities based on PAM architects' designs, handle daily ops, and collaborate with security, infra and architecture teams. Advanced English required.

Qualifications

• 3–5 years hands-on experience with CyberArk/Idira Privilege Cloud environments.
• Strong knowledge of privileged account management, safes, password rotation, CPM/PSM, and PAM policies.

Responsibilities

• PAM operations and support
• Monitor, support and maintain the PAM environment
• Perform health checks, incidents, service requests, maintenance
• Troubleshoot privileged accounts, password rotation, safes, policies, session management, integration
• Manage Privilege Cloud connector servers: patching, upgrades, certs, recovery
• Onboard and maintain privileged accounts, target systems, safes, platforms and policies
• Configure and test PAM solutions and enhancements
• Support rollout of WPM, EPM, Vendor PAM
• Contribute to automation via APIs, PowerShell
• Participate in incident management, root cause analysis, disaster recovery tests
• Maintain operational docs and audit records
• Collaborate with infra, security, identity, app and architecture teams
• Advanced English

Skills

CyberArk/Idira PAM

Privileged account management

Windows & Linux

Active Directory & Entra ID

SSO & MFA

Incident/Problem/Change management

Automation concepts

Tools

Privilege Cloud connectors

APIs

PowerShell

Job description

PAM Operations & Platform Engineer

About the Offer

We are currently looking for a PAM Operations & Platform Engineer to join the team of our client from the pharmaceutical industry. For this role, Optiveum is the recruitment and contracting party, which means you will sign the cooperation agreement directly with us.

This is a hands-on operational role focused on the administration, support, maintenance and continuous improvement of the CyberArk/Idira PAM platform, with Privilege Cloud as the core solution. Alongside day-to-day operations, you will implement and configure new PAM capabilities based on designs from PAM architects, and support Workforce Password Management (WPM), Endpoint Privilege Management (EPM), Vendor PAM and other PAM technologies as they are introduced.

Key Details:

• Rate: up to 35 EUR/h net + VAT

• Work Model: B2B contract, full-time (40 h/week), hybrid – 75% remote

• Location: Warsaw

• Language: Advanced English

Responsibilities:

PAM operations and support

• Monitor, support and maintain the Privileged Access Management (PAM) environment

• Perform health checks, resolve incidents, fulfil service requests and carry out operational support activities

• Troubleshoot privileged accounts, password rotation and reconciliation, safes, policies, session management, authentication, integrations and connectivity

• Manage and maintain Privilege Cloud connector servers, including patching, upgrades, certificate management, recovery and redeployment

Platform administration and implementation

• Onboard and maintain privileged accounts, target systems, safes, platforms and policies

• Configure and test architect-approved PAM solutions and enhancements

• Support the rollout and operation of WPM, EPM, Vendor PAM and other PAM capabilities

• Contribute to automation and integrations using APIs, PowerShell and other supported technologies

Operational excellence

• Take part in major incident management, root cause analysis, disaster recovery testing and break-glass exercises

• Maintain operational documentation, troubleshooting guides, compliance evidence and audit records

• Work closely with infrastructure, security, identity, application and architecture teams

Requirements:

• 3–5 years of hands-on experience supporting or administering CyberArk/Idira Privilege Cloud environments

• Strong practical knowledge of privileged account management, safes and access permissions, password management and rotation, CPM, PSM and session management, and PAM policies and platform administration

• Experience managing and troubleshooting Privilege Cloud connectors and supporting infrastructure

• Knowledge of Windows and Linux, Active Directory and Entra ID, SSO and MFA, and DNS, certificates, firewalls and networking

• Understanding of PAM business continuity, disaster recovery and emergency access processes

• Ability to independently implement, configure and test solutions based on technical designs

• Experience working within incident, problem and change management processes

• Advanced English

Nice to have:

• Hands-on experience with several PAM capabilities, such as Privilege Cloud, WPM, EPM and Vendor PAM

• Experience with PAM integrations, APIs and automation

• Experience in a GxP-regulated environment, ideally in pharmaceuticals or life sciences, including change control, validation and qualification, and audit trails and compliance documentation

• Experience with ServiceNow, SIEM integrations, PowerShell, Linux and SSH

• Relevant CyberArk or Idira certifications