OT CyberArk Engineer – Remote PAM Specialist (Contract)

KeyData Cyber; United States; Remote; USD 110,000 - 165,000; Full time

Job summary

KeyData Cyber is seeking a CyberArk Engineer to design, implement, and run PAM solutions for OT and regulated utility clients in North America. You will secure privileged accounts, manage Digital Vault, PVWA, CPM, and DR Vaults, and ensure resilience across on-prem, segmented, and air-gapped networks.

You will collaborate with OT, IT, and compliance teams, perform health checks, and create runbooks and documentation to support audit and security goals.

Qualifications

• 5+ years hands-on CyberArk engineering and PAM experience.
• Experience deploying Digital Vault, CPM, PVWA, and DR Vaults including failover tests.
• Experience in OT, regulated utilities, or air-gapped environments.
• Familiarity with NERC CIP controls and resilience requirements.
• Hands-on onboarding of privileged accounts (Windows Server, Linux, SSH keys, service accounts, DBs).

Responsibilities

• Deploy, configure, and support CyberArk PAM components (Digital Vault, PVWA, CPM, PSM, DR Vaults).
• Configure Safes, onboarding, credential rotation and reconciliation accounts across OT and enterprise.
• Plan and execute failover, backup/restore, and DR testing for critical systems.
• Onboard and manage privileged accounts across Windows Server, RHEL/Linux, SSH keys, service accounts, scheduled tasks, apps, databases.
• Implement secure privileged access controls aligned with NERC CIP and change management.
• Work in air-gapped/segmented networks and adapt deployment/patching on restricted connectivity.
• Collaborate with OT, infrastructure, security, and compliance to translate requirements into PAM designs.
• Perform upgrades, troubleshooting, health checks, and maintain platform availability & security.
• Create technical docs, SOPs, runbooks, compliance evidence, and conduct knowledge transfers.

Skills

CyberArk PAM

Privileged access management

OT security

NERC CIP

Communication - OT/IT/Compliance

Tools

Digital Vault

PVWA

CPM

PSM

Disaster Recovery Vaults

Job description

KeyData Cyber is seeking a CyberArk Engineer to design, implement, and run PAM solutions for OT and regulated utility clients in North America. You will secure privileged accounts, manage Digital Vault, PVWA, CPM, and DR Vaults, and ensure resilience across on-prem, segmented, and air-gapped networks.

You will collaborate with OT, IT, and compliance teams, perform health checks, and create runbooks and documentation to support audit and security goals.