Identity Security Engineer

Claranet limited; Lisboa; Híbrido; EUR 42 000 - 64 000; Tempo integral

Resumo da oferta

Claranet limited is seeking an Identity Security Engineer in Lisbon/Porto to join our internal team. You will administer CyberArk PAM end-to-end, design IAM/PAM policies and safeguard privileged access across Active Directory environments.

You will lead AD and IAM/PAM assessments, implement remediation plans and contribute to resilience and disaster recovery strategies. A strong foundation in CyberArk, AD security and Identity governance is essential.

Qualificações

• Bachelor's degree in Cybersecurity, Computer Science, Computer Engineering or a related field.
• 3–5 years of experience in cybersecurity with hands-on IAM/PAM and Active Directory security.
• Demonstrable experience administering CyberArk in production environments (Vault, CPM, PVWA, PSM, ideally Privilege Cloud).
• Solid knowledge of IAM/PAM concepts and lifecycle management (onboarding, rotation, reconciliation, session monitoring).
• Hands-on experience using AD security assessment tools such as Purple Knight or Netwrix PingCastle.

Responsabilidades

• Administer, configure and operate the CyberArk PAM suite end-to-end (Vault, CPM, PVWA, PSM, PTA/Privilege Cloud) to ensure availability, performance and security.
• Design, implement and maintain IAM/PAM policies, safes, platforms and access workflows aligned with least-privilege and Zero Trust.
• Architect and implement CyberArk components focused on protecting domain credentials, service accounts and administrative access to Active Directory.
• Manage the full lifecycle of privileged accounts (onboarding, rotation, reconciliation, discovery) and tune credential management policies.
• Develop and execute Active Directory vulnerability remediation plans in articulation with the PAM strategy.
• Lead Active Directory and IAM/PAM assessment projects using tools like Purple Knight or similar to identify identity risks.
• Design and validate resilience and disaster recovery strategies for AD and CyberArk environment (backup, HA/DR).
• Act as technical reference on CyberArk architecture, IAM/PAM best practices, Kerberos, NTLM, GPOs and AD topology security.

Conhecimentos

IAM/PAM

CyberArk

Active Directory security

Zero Trust

Kerberos

NTLM

GPOs

Privilege Cloud

Formação académica

Bachelor's degree in Cybersecurity, Computer Science or Computer Engineering

Ferramentas

Purple Knight

Netwrix PingCastle

Descrição da oferta de emprego

We're fast learners, hard workers, natural collaborators... and we Make Modern Happen !

Our ambition is to unlock the potential of our digital world so that organisations everywhere can innovate and thrive securely.

We aim to achieve this goal by bringing together the world’s most talented people and the most powerful technologies, combining them to address our customers' challenges and to build something stronger together.

Right now,we are looking for aIdentity Security Engineer to integrate our internal team, based in Lisbon/Porto.

Your responsibilities include:

• Administer,configure and operate the CyberArk Privileged Access Management (PAM) suiteend-to-end (Vault, CPM, PVWA, PSM, PTA/Privilege Cloud), ensuring availability,performance and security of the platform.
  
• Design,implement and maintain IAM/PAM policies, safes, platforms and access workflowsaligned with least-privilege and Zero Trust principles.
  
• Architectand implement CyberArk components focused on protecting domain credentials,service accounts and administrative access to Active Directory.
  
• Manage thefull lifecycle of privileged accounts (onboarding, rotation, reconciliation,discovery) and continuously tune credential management policies.
  
• Develop andexecute Active Directory Vulnerability Remediation plans to strengthen clients'AD security posture, in articulation with the PAM strategy.
  
• Lead ActiveDirectory and IAM/PAM Assessment projects, using specialized tools such asPurple Knight or similar to identify and prioritise critical identity risks.
  
• Design andvalidate resilience and disaster recovery strategies for AD and for theCyberArk environment (backup, HA/DR).
  
• Act astechnical reference and advisor on CyberArk architecture, IAM/PAM bestpractices, Kerberos, NTLM, GPOs and AD topology security.
  

You must have:

• Bachelor'sdegree in Cybersecurity, Computer Science, Computer Engineering or a relatedfield.
  
• 3 to 5years of experience in cybersecurity, with proven, hands‑on focus on IAM/PAMand Identity/Active Directory security.
  
• Demonstrable,recognised experience administering and managing CyberArk in productionenvironments (Vault, CPM, PVWA, PSM, and ideally Privilege Cloud).
  
• Solidpractical knowledge of IAM/PAM concepts and lifecycle management (privilegedaccount onboarding, rotation, reconciliation, session monitoring).
  
• Hands‑onexperience using AD security assessment tools such as Purple Knight, NetwrixPingCastle or similar.
  

We value:

• CyberArkcertifications (e.g., CyberArk Defender, CyberArk Sentry) are highly valued andconsidered a significant differentiator for this role.
  
• BroaderIAM/PAM experience beyond CyberArk (e.g., other PAM/IAM platforms) ascomplementary knowledge.
  
• Stronganalytical and problem‑solving skills.
  
• Ameticulous and detail‑oriented mindset.