Identity Security Engineer

Claranet Portugal; Lisboa; Presencial; EUR 45 000 - 70 000; Tempo integral

Resumo da oferta

Claranet Portugal seeks an Identity Security Engineer to join the Lisbon/Porto team. You will administer CyberArk PAM, design IAM/PAM policies, and safeguard Active Directory following Zero Trust principles.

Ideal candidates have a Bachelor's degree in cybersecurity or related field and 3–5 years hands-on IAM/PAM/AD security experience, including production CyberArk. Join us to help secure client identities and strengthen security postures.

Qualificações

• Bachelor's degree in Cybersecurity, Computer Science, Computer Engineering or a related field.
• 3 to 5 years of experience in cybersecurity with IAM/PAM and AD security.
• Hands-on experience administering CyberArk in production (Vault, CPM, PVWA, PSM, Privilege Cloud).
• Solid knowledge of IAM/PAM concepts and lifecycle management (onboarding, rotation, reconciliation).
• Experience with AD security assessment tools such as Purple Knight or Netwrix PingCastle.

Responsabilidades

• Administer, configure and operate the CyberArk PAM suite end-to-end (Vault, CPM, PVWA, PSM, PTA/Privilege Cloud).
• Design, implement and maintain IAM/PAM policies, safes, platforms and access workflows with least-privilege and Zero Trust.
• Architect and implement CyberArk components protecting domain credentials, service accounts and AD access.
• Manage the full lifecycle of privileged accounts (onboarding, rotation, reconciliation, discovery).
• Develop and execute AD vulnerability remediation plans in articulation with the PAM strategy.
• Lead AD and IAM/PAM Assessment projects using tools like Purple Knight to identify risks.
• Design and validate resilience and disaster recovery strategies for AD and CyberArk environments.
• Act as technical reference on CyberArk, IAM/PAM best practices, Kerberos, NTLM, GPOs and AD topology security.

Conhecimentos

IAM/PAM concepts

Active Directory security

CyberArk PAM administration

Zero Trust

GPOs & AD topology security

Formação académica

Bachelor's degree in Cybersecurity, Computer Science or related field

Ferramentas

CyberArk

Descrição da oferta de emprego

We're fast learners, hard workers, natural collaborators... and we Make Modern Happen!

Our ambition is to unlock the potential of our digital world so that organisations everywhere can innovate and thrive securely.

We aim to achieve this goal by bringing together the world’s most talented people and the most powerful technologies, combining them to address our customers' challenges and to build something stronger together.

Right now, we are looking for a Identity Security Engineer to integrate our internal team, based in Lisbon/Porto.

Your responsibilities include:

• Administer, configure and operate the CyberArk Privileged Access Management (PAM) suite end-to-end (Vault, CPM, PVWA, PSM, PTA/Privilege Cloud), ensuring availability, performance and security of the platform.


• Design, implement and maintain IAM/PAM policies, safes, platforms and access workflows aligned with least-privilege and Zero Trust principles.


• Architect and implement CyberArk components focused on protecting domain credentials, service accounts and administrative access to Active Directory.


• Manage the full lifecycle of privileged accounts (onboarding, rotation, reconciliation, discovery) and continuously tune credential management policies.


• Develop and execute Active Directory Vulnerability Remediation plans to strengthen clients' AD security posture, in articulation with the PAM strategy.


• Lead Active Directory and IAM/PAM Assessment projects, using specialized tools such as Purple Knight or similar to identify and prioritise critical identity risks.


• Design and validate resilience and disaster recovery strategies for AD and for the CyberArk environment (backup, HA/DR).


• Act as technical reference and advisor on CyberArk architecture, IAM/PAM best practices, Kerberos, NTLM, GPOs and AD topology security.

You must have:

• Bachelor's degree in Cybersecurity, Computer Science, Computer Engineering or a related field.


• 3 to 5 years of experience in cybersecurity, with proven, hands-on focus on IAM/PAM and Identity/Active Directory security.


• Demonstrable, recognised experience administering and managing CyberArk in production environments (Vault, CPM, PVWA, PSM, and ideally Privilege Cloud).


• Solid practical knowledge of IAM/PAM concepts and lifecycle management (privileged account onboarding, rotation, reconciliation, session monitoring).


• Hands-on experience using AD security assessment tools such as Purple Knight, Netwrix PingCastle or similar.

We value:

• CyberArk certifications (e.g., CyberArk Defender, CyberArk Sentry) are highly valued and considered a significant differentiator for this role.


• Broader IAM/PAM experience beyond CyberArk (e.g., other PAM/IAM platforms) as complementary knowledge.


• Strong analytical and problem-solving skills.


• A meticulous and detail-oriented mindset.