CyberArk - PAM/Cloud

The Planet Group; Bridgewater (MA); On-site; USD 140,000 - 190,000; Full time

Job summary

The Planet Group is seeking a Senior CyberArk PAM Implementation Engineer to assess, optimize, and enhance our CyberArk Privileged Access Management environment. The role will lead or support the design of current-state architecture and a target-state roadmap, emphasizing Cloud, EPM, SIA, and JIT capabilities.

You will onboard applications and service accounts, manage password rotation and privileged session access, and integrate CyberArk with IAM, ITSM, and SIEM platforms.

Qualifications

• 5+ years of hands-on CyberArk PAM engineering.
• Strong CyberArk Cloud/SaaS experience.
• Experience with SIA and JIT implementations.
• CyberArk assessment and architecture review experience.
• Password rotation, reconciliation, and session management.
• Application onboarding and secrets management.
• Windows and Linux administration.
• Cloud integration (Azure, AWS, or GCP).

Responsibilities

• Assess and optimize existing CyberArk environments.
• Design CyberArk target-state architecture and PAM roadmap.
• Implement CyberArk Cloud, SIA, JIT, and EPM solutions.
• Manage password rotation, session monitoring, and secrets management.
• Onboard applications, service accounts, and privileged accounts.
• Integrate CyberArk with IAM, cloud, ITSM, and SIEM platforms.
• Develop automation using PowerShell, Python, and APIs.
• Create standards, SOPs, and governance processes.

Skills

CyberArk PAM implementation

CyberArk EPM

CyberArk SIA

JIT (Just-in-Time Privileged Access)

PSM / PSMP

Account onboarding

Secrets Management

Windows & Linux Privileged Access

PowerShell

Python

REST API Automation

CyberArk Architecture Assessment

PAM Roadmap Development

Tools

PowerShell

Python

REST API

Job description

Client Job Title: IT Cybersecurity -Implementation Engineer

Duration: 1 year

We are seeking an experienced Senior CyberArk PAM Implementation Engineer to assess, optimize, and enhance our existing CyberArk Privileged Access Management environment. The ideal candidate will have strong hands-on experience with CyberArk Cloud/SaaS and the ability to perform a comprehensive assessment of the existing PAM implementation, identify security and operational gaps, and develop a strategic roadmap for utilizing CyberArk capabilities to their fullest extent.

This role requires deep expertise in CyberArk PAM and Endpoint Privilege Manager (EPM), Secure Infrastructure Access (SIA), Just-in-Time (JIT) privileged access, application onboarding, password rotation, privileged session access, secrets management, and cloud integrations. The successful candidate will define the current-state architecture, recommend a target-state design based on CyberArk and industry best practices, and lead or support execution of the resulting roadmap.

Must-Have Skills

• CyberArk PAM implementation
• CyberArk EPM (Endpoint Privilege Manager)
• CyberArk SIA (Secure Infrastructure Access)
• JIT (Just-in-Time Privileged Access)
• PSM / PSMP (Privileged Session Management)
• Account, Service Account & Application Onboarding
• Secrets Management
• Windows & Linux Privileged Access
• PowerShell, Python, REST API Automation
• CyberArk Architecture Assessment & PAM Roadmap Development

Key Responsibilities

• Assess and optimize existing CyberArk environments.
• Design CyberArk target-state architecture and PAM roadmap.
• Implement CyberArk Cloud, SIA, JIT, and EPM solutions.
• Manage password rotation, session monitoring, and secrets management.
• Onboard applications, service accounts, and privileged accounts.
• Integrate CyberArk with IAM, cloud, ITSM, and SIEM platforms.
• Develop automation using PowerShell, Python, and APIs.
• Create standards, SOPs, and governance processes.

Required Experience

• 5+ years of hands‑on CyberArk PAM engineering.
• Strong CyberArk Cloud/SaaS experience.
• Experience with SIA and JIT implementations.
• CyberArk assessment and architecture review experience.
• Password rotation, reconciliation, and session management.
• Application onboarding and secrets management.
• Windows and Linux administration.
• Cloud integration (Azure, AWS, or GCP).

Strongly Preferred

• CyberArk EPM design, deployment, policy development, and agent rollout.
• PTA (Privileged Threat Analytics).
• ITSM and SIEM integrations.

Preferred Certifications

• CyberArk Sentry
• CyberArk Cloud Certifications
• CISSP (nice to have)

What the Hiring Manager Will Focus On

• CyberArk Cloud/SaaS
• EPM Implementation
• SIA Implementation
• JIT Privileged Access
• CPM & PSM
• Secrets Management
• PowerShell/Python Automation

This is primarily a senior CyberArk architect/engineer role withheavy emphasis on Cloud, EPM, SIA, and JIT.