PAM Engineer

SFE; Dallas (TX); Vor Ort; USD 110.000 - 160.000; Vollzeit

Zusammenfassung

SFE seeks an experienced PAM Engineer to design, implement, and support CyberArk across enterprise environments onsite in Dallas, TX or Phoenix, AZ. The role emphasizes onboarding critical systems, enforcing least privilege, and enabling secure privileged access with IAM and MFA integrations.

Ideal candidates have 8+ years in Cyber Security with 3+ years CyberArk administration, strong scripting skills, and a drive for security governance and compliance.

Qualifikationen

• 8+ years in Cyber Security with at least 3+ years CyberArk admin experience.
• Hands-on CyberArk Vault, PVWA, CPM, PSM, PTA, EPM proficiency.
• Experience integrating CyberArk with AD and MFA.
• Strong scripting (PowerShell, Python) for automation.
• Knowledge of IAM concepts and least privilege security.

Aufgaben

• Design, implement, administer, and support CyberArk PAM across enterprise env.
• Onboard servers, databases, apps, networks, and cloud into CyberArk.
• Configure Vault, PVWA, CPM, PSM, PTA, EPM; manage password rotations.
• Enforce least privilege, privileged account governance, and monitoring.
• Support audits, SOX, PCI-DSS, NIST, ISO 27001 compliance.
• Develop automation scripts for onboarding, reporting, and ops tasks.
• Create runbooks and technical docs; perform health checks and upgrades.

Kenntnisse

CyberArk PAM

CyberArk Vault

PVWA

CPM

PSM

PTA

EPM

Windows/Linux

IAM concepts

Active Directory

MFA integration

PowerShell

Python

Automation

Ausbildung

Bachelor's degree in Computer Science or related field

Tools

Azure Entra ID (Azure AD)

LDAP

ServiceNow

SailPoint

Saviynt

Okta

Jobbeschreibung

Job Title: PAM Engineer CyberArk

Job Type: Fulltime

Client Location: Phoenix, AZ / Dallas, TX

Work Arrangement: Onsite Position from day one

Must Have Technical/Functional Skills

• 8+ years of experience in Cyber Security with at least 3+ years of CyberArk administration experience.
• Strong hands-on experience with:
• CyberArk Vault
• PVWA (Password Vault Web Access)
• CPM (Central Policy Manager)
• PSM (Privileged Session Manager)
• PTA (Privileged Threat Analytics)
• EPM (Endpoint Privilege Manager)
• Experience with Windows and Linux server administration.
• Understanding of Identity & Access Management (IAM) concepts.
• Experience integrating CyberArk with Active Directory and MFA solutions.
• Knowledge of password management, privileged account governance, and security best practices.
• Experience with PowerShell, Python, or scripting for automation.
• Strong troubleshooting and stakeholder management skills.

Roles & Responsibilities

We are seeking an experienced CyberArk PAM Engineer to design, implement, administer, and support Privileged Access Management solutions across enterprise environments. The ideal candidate will be responsible for securing privileged accounts, onboarding critical systems, enforcing least privilege principles, and supporting cybersecurity compliance initiatives.

Key Responsibilities

• Administer and maintain the CyberArk Privileged Access Management (PAM) platform.
• Onboard servers, databases, applications, network devices, and cloud platforms into CyberArk.
• Configure and manage CyberArk components including Vault, PVWA, CPM, PSM, PTA, and EPM.
• Support privileged account lifecycle management, password rotations, account discovery, and reconciliation.
• Implement privileged session monitoring, recording, and auditing controls.
• Work with application teams to onboard service accounts and privileged credentials.
• Troubleshoot CyberArk-related issues and perform root cause analysis.
• Integrate CyberArk with Active Directory, LDAP, Azure AD (Entra ID), and MFA solutions.
• Support compliance requirements related to SOX, PCI-DSS, NIST, ISO 27001, and banking regulations.
• Perform health checks, upgrades, patching, and platform maintenance activities.
• Develop automation scripts for account onboarding, reporting, and operational tasks.
• Create operational runbooks, technical documentation, and knowledge articles.
• Participate in security audits and remediation activities.

Required Skills

• 5+ years of experience in Cyber Security with at least 3+ years of CyberArk administration experience.
• Strong hands-on experience with:

• CyberArk Vault
• PVWA (Password Vault Web Access)
• CPM (Central Policy Manager)
• PSM (Privileged Session Manager)
• PTA (Privileged Threat Analytics)
• EPM (Endpoint Privilege Manager)

• Experience with Windows and Linux server administration.
• Understanding of Identity & Access Management (IAM) concepts.
• Experience integrating CyberArk with Active Directory and MFA solutions.
• Knowledge of password management, privileged account governance, and security best practices.
• Experience with PowerShell, Python, or scripting for automation.
• Strong troubleshooting and stakeholder management skills.

Preferred Skills

• Experience with Azure, AWS, and cloud privileged access management.
• Experience with SailPoint, Saviynt, Okta, or Entra ID.
• Familiarity with ServiceNow integration.
• Knowledge of DevSecOps and Secrets Management.
• Experience with Kubernetes, Docker, and cloud-native security.
• Banking or Financial Services domain experience.

Key Technologies

• CyberArk PAM Suite
• CyberArk EPM
• CyberArk Secrets Manager
• Active Directory
• Microsoft Entra ID (Azure AD)
• LDAP
• ServiceNow
• PowerShell
• Python
• Windows Server
• Linux
• Azure / AWS

Qualifications

• Bachelor's degree in Computer Science, Information Security, or related field.
• Preferred Certifications:

• CyberArk Defender
• CyberArk Sentry
• CyberArk Guardian
• CISSP
• Security+
• AZ-500

Nice-to-Have Banking Experience

• Managing privileged access for banking and financial systems.
• Supporting regulatory audits and compliance reviews.
• Securing service accounts, admin accounts, and production environments.
• Implementing least-privilege and Zero Trust security controls.