Idira (formerly CyberArk) PAM Engineer

Nicky Andre Technology Service; Plainfield, Northern (IN, KY); Hybrid; USD 110,000 - 150,000; Full time

Job summary

Nicky Andre Technology Service is seeking a PAM engineer to design, deploy and operate Idira PAM across diverse environments. You will manage end-to-end implementations, onboarding privileged accounts and integrating with identity and security tooling.

You will migrate existing CyberArk estates to Idira, implement least-privilege and session isolation concepts, and support ongoing identity operations for clients with health checks and upgrades.

Qualifications

• 3+ years hands-on with CyberArk PAM or Idira (PVWA, CPM, PSM, Conjur or equivalents).
• Working knowledge of Active Directory, Windows and Linux administration and networking.
• Comfortable writing PowerShell or Python for onboarding and automation.
• Can explain least privilege to a business owner and a session-isolation design to an engineer.
• Authorized to work in the United States without sponsorship.

Responsibilities

• Lead Idira PAM implementations end to end: discovery, tiering model, vault and session architecture, deployment, handover.
• Onboard privileged accounts across Windows, Linux, databases and cloud consoles; configure credential rotation and just-in-time elevation.
• Migrate existing CyberArk estates to Idira and consolidate standing privilege.
• Integrate with Okta, Microsoft Entra, SailPoint and SIEM tooling.
• Produce the evidence packs cyber-insurance underwriters and auditors ask for.
• Run managed identity operations for retained clients: health, upgrades, access certifications.

Skills

Active Directory

Windows administration

Linux administration

Networking

PowerShell

Python

Least privilege explanation

Tools

Idira

CyberArk PAM

PVWA

CPM

PSM

Conjur

Okta

Microsoft Entra

SailPoint

Job description

Design, deploy and run privileged access management on Idira (the platform Palo Alto Networks formed from CyberArk) for businesses that have never had PAM — and prove it to their cyber-insurance carriers.

Responsibilities

• Lead Idira PAM implementations end to end: discovery, tiering model, vault and session architecture, deployment, handover
• Onboard privileged accounts across Windows, Linux, databases and cloud consoles; configure credential rotation and just-in-time elevation
• Migrate existing CyberArk estates to Idira and consolidate standing privilege
• Integrate with Okta, Microsoft Entra, SailPoint and SIEM tooling
• Produce the evidence packs cyber-insurance underwriters and CMMC, SOC 2 and HIPAA auditors ask for
• Run managed identity operations for retained clients: health, upgrades, access certifications

Requirements

• 3+ years hands-on with CyberArk PAM or Idira (PVWA, CPM, PSM, Conjur or equivalents)
• Working knowledge of Active Directory, Windows and Linux administration and networking
• Comfortable writing PowerShell or Python for onboarding and automation
• Can explain least privilege to a business owner and a session-isolation design to an engineer
• Authorized to work in the United States without sponsorship