CyberArk PAM engineer

GCS Recruitment; United States; Remote; USD 120,000 - 160,000; Full time

Job summary

GCS Recruitment Specialists is seeking a Senior Cyber Security Engineer specializing in privileged access management with CyberArk as the core platform. You will own the design, deployment and health of the security tooling estate across managed clients, with PAM as your deepest expertise.

Beyond CyberArk, the role covers Zscaler (ZIA/ZPA) and a broad modern security stack; hands-on experience with EDR, SIEM, vulnerability management and email security is required to support client connectivity

Qualifications

• 5+ years in security engineering with hands-on CyberArk design/administration (PAM Self-Hosted or Privilege Cloud).
• Experience deploying or operating Zscaler and at least two of EDR, SIEM, vulnerability management, or email security.
• Strong scripting capability (PowerShell or Python) for automation and integration.

Responsibilities

• CyberArk design, deployment and operation across managed clients: vaulting, session management and secrets.
• Design PAM onboarding programmes for new clients including discovery, scoping and rollout.
• Integrate PAM with identity stack (Entra ID, conditional access, MFA).
• Automate deployment and operational tasks; maintain tooling health and integration reliability.
• Act as senior escalation for identity and tooling incidents; document designs and standards.

Skills

CyberArk design & administration

Scripting (PowerShell or Python)

Zscaler deployment (ZIA/ZPA)

Security tooling automation

Multi-client environment experience

Tools

PowerShell

Python

CyberArk Privilege Cloud

Zscaler (ZIA/ZPA)

EDR/SIEM tools

Job description

We are looking for a Senior Cyber Security Engineer specialising in privileged access management, with CyberArk as the core platform. This is the senior tooling and identity specialist role in the Cyber Security team under our 2026 operating model: you own the design, deployment and health of the security tooling estate across our managed clients, with PAM as your deepest expertise.

Beyond CyberArk, the role carries breadth across the modern security stack: hands-on experience with Zscaler (ZIA/ZPA) and working capability across EDR, SIEM, vulnerability management and the wider cyber product set we operate for clients.

You will report to the Cyber Operations Lead and work closely with the SOC engineers, the Pre-sales Security Consultant and the Platform & Infrastructure teams.

Requirements

Key Responsibilities

• CyberArk & privileged access management
• Own CyberArk design, deployment and operation across managed clients: vaulting, session management, secrets management and privileged threat analytics.
• Design PAM onboarding programmes for new clients: discovery, scoping, policy design and rollout.
• Integrate PAM with the wider identity stack: Entra ID, conditional access, MFA and just-in-time access patterns.
• Set privileged access standards and evidence them for client audits (ISO 27001, Cyber Essentials Plus).

Security tooling & engineering

• Deploy, configure and maintain the security tooling estate: EDR, SIEM integrations, vulnerability scanning and email security.
• Support Zscaler (ZIA/ZPA) deployment and policy work alongside the zero trust leads.
• Own tooling health: version currency, coverage gaps, tuning quality and integration reliability.
• Automate deployment and operational tasks with scripts and APIs; contribute to the shared automation library.

Service & quality

• Act as senior escalation for identity and tooling incidents; support major incident response.
• Document designs, runbooks and standards to a level the wider team can operate from.
• Contribute tooling and PAM expertise to service reviews and solution scoping when needed.
• Adopt AI-assisted workflows for diagnostics, configuration review and documentation.

Experience

• 5+ years in security engineering with 2+ years of hands-on CyberArk design and administration (PAM Self-Hosted or Privilege Cloud).
• Experience deploying or operating Zscaler (ZIA/ZPA) and at least two of: EDR platforms, SIEM, vulnerability management, email security.
• Strong scripting capability (PowerShell or Python) applied to security tooling automation and integration.
• MSP/MSSP or multi-client environment experience preferred; client audit exposure an advantage.

Certifications

• Essential (or equivalent hands-on experience): CyberArk Defender certification; CyberArk Sentry strongly preferred.
• Desirable: CyberArk Guardian, Zscaler professional-level certification (ZIA/ZPA), Microsoft SC-300, SC-200, AZ-500, or EDR vendor certifications.