IAM/PAM Security Engineer—CyberArk Expert

Claranet Portugal; Lisboa; Presencial; EUR 45 000 - 70 000; Tempo integral

Resumo da oferta

Claranet Portugal seeks an Identity Security Engineer to join the Lisbon/Porto team. You will administer CyberArk PAM, design IAM/PAM policies, and safeguard Active Directory following Zero Trust principles.

Ideal candidates have a Bachelor's degree in cybersecurity or related field and 3–5 years hands-on IAM/PAM/AD security experience, including production CyberArk. Join us to help secure client identities and strengthen security postures.

Qualificações

• Bachelor's degree in Cybersecurity, Computer Science, Computer Engineering or a related field.
• 3 to 5 years of experience in cybersecurity with IAM/PAM and AD security.
• Hands-on experience administering CyberArk in production (Vault, CPM, PVWA, PSM, Privilege Cloud).
• Solid knowledge of IAM/PAM concepts and lifecycle management (onboarding, rotation, reconciliation).
• Experience with AD security assessment tools such as Purple Knight or Netwrix PingCastle.

Responsabilidades

• Administer, configure and operate the CyberArk PAM suite end-to-end (Vault, CPM, PVWA, PSM, PTA/Privilege Cloud).
• Design, implement and maintain IAM/PAM policies, safes, platforms and access workflows with least-privilege and Zero Trust.
• Architect and implement CyberArk components protecting domain credentials, service accounts and AD access.
• Manage the full lifecycle of privileged accounts (onboarding, rotation, reconciliation, discovery).
• Develop and execute AD vulnerability remediation plans in articulation with the PAM strategy.
• Lead AD and IAM/PAM Assessment projects using tools like Purple Knight to identify risks.
• Design and validate resilience and disaster recovery strategies for AD and CyberArk environments.
• Act as technical reference on CyberArk, IAM/PAM best practices, Kerberos, NTLM, GPOs and AD topology security.

Conhecimentos

IAM/PAM concepts

Active Directory security

CyberArk PAM administration

Zero Trust

GPOs & AD topology security

Formação académica

Bachelor's degree in Cybersecurity, Computer Science or related field

Ferramentas

CyberArk

Descrição da oferta de emprego

Claranet Portugal seeks an Identity Security Engineer to join the Lisbon/Porto team. You will administer CyberArk PAM, design IAM/PAM policies, and safeguard Active Directory following Zero Trust principles.

Ideal candidates have a Bachelor's degree in cybersecurity or related field and 3–5 years hands-on IAM/PAM/AD security experience, including production CyberArk. Join us to help secure client identities and strengthen security postures.