PAM Engineer

SDG Corporation; United States; Remote; USD 120,000 - 180,000; Full time

Job summary

SDG Corporation seeks a hands-on Privileged Access Management (PAM) Engineer to support a large CyberArk enhancement program across AD, Windows, Linux, databases, cloud, and secrets-management use cases. The role delivers design, configuration, testing and transition to operations.

You will collaborate with PAM architects, security and operations to onboard privileged identities, resolve issues, support testing and hyper-care, and produce operational handoff documentation.

Qualifications

• 5+ years hands-on CyberArk PAM experience in enterprise deployments.
• Onboarding privileged accounts, password management, session management and policy configuration.
• Strong understanding of IAM and PAM architecture, privileged identity lifecycle, authentication and access-control patterns.
• Experience integrating CyberArk with AD/Windows/Unix/Linux, databases and cloud environments.
• Working knowledge of Windows and Linux operating systems, network/data-center concepts, remote administration.
• Ability to troubleshoot complex technical issues across CyberArk components, target systems and policies.
• Strong documentation skills: runbooks, test evidence and knowledge-transfer materials.
• Excellent written and verbal communication; able to work independently with cross-functional teams.
• Ability to work during India night-shift hours aligned to the US Eastern Time workday.

Responsibilities

• Participate in discovery and solution-design activities; translate designs into CyberArk configurations.
• Configure and maintain CyberArk PAM components and policies.
• Onboard privileged accounts and target systems across AD, Windows, SQL Server, cloud environments.
• Configure password-management, rotation, credential-management, and privileged-session policies.
• Configure connectors, safes/vault structures, and access controls for target systems.
• Support integrations with AWS, Azure, Entra ID, OCI, Secrets Manager, Key Vault, ServiceNow, and others.
• Troubleshoot onboarding, password-management, session-management, connector, and RDP issues.
• Support EPM for endpoint privilege use cases; ensure operations readiness.
• Develop and maintain technical documentation, runbooks, and knowledge-transfer materials.
• Support production changes, validation, and hypercare activities; resolve defects and stabilise.

Skills

CyberArk

IAM architecture

Privileged onboarding

Troubleshooting

Windows

Linux/Unix

Cloud environments

Documentation

Shift coordination

Education

Bachelor's degree in CS/IS/Cybersecurity/Engineering

Equivalent professional experience

Tools

CyberArk IDIRA Privilege Cloud

PSM

CPM

Secrets Hub

EPM

Active Directory

Windows

Linux/Unix

AWS/Azure

SQL Server

Job description

Role Summary

We are seeking a hands-on Privileged Access Management (PAM) Engineer to support a large-scale CyberArk enhancement and adoption program. The role will design, configure, integrate, test, troubleshoot, and transition PAM capabilities across cloud, Active Directory, endpoint, database, Windows Server, and secrets-management use cases.

The Engineer will work closely with PAM architects, platform owners, security teams, application teams, and operations to translate approved designs into production-ready configurations, onboard privileged identities and target systems, resolve technical issues, support testing and hyper-care, and produce the documentation required for operational handoff.

Key Responsibilities

• Participate in discovery and solution-design activities, validate technical requirements and dependencies, and translate approved designs into implementable CyberArk configurations.
• Configure and maintain CyberArk PAM components and policies applicable to the program, including CyberArk IDIRA Privilege Cloud, Privileged Session Manager (PSM), Central Policy Manager (CPM), Secrets Hub, and Endpoint Privilege Manager (EPM).
• Onboard privileged accounts and target systems across Microsoft Active Directory, Windows Server, Microsoft SQL Server, cloud administrative environments, and other in-scope platforms.
• Configure password-management, reconciliation, rotation, credential-management, and privileged-session policies in line with approved requirements and operational standards.
• Configure connectors, platform policies, safes/vault structures, access controls, and related onboarding components for applicable target systems.
• Support integrations with Amazon Web Services (AWS), Microsoft Azure, Microsoft Entra ID, Oracle Cloud Infrastructure (OCI), AWS Secrets Manager, Azure Key Vault, ServiceNow, and other in-scope supporting systems as defined by the program.
• Troubleshoot complex onboarding, password-management, session-management, connector, proxy-session, Remote Desktop Protocol (RDP), and target-platform issues through structured technical investigation.
• Support endpoint privilege use cases and policy implementation through CyberArk EPM for in-scope endpoint scenarios.
• Execute unit and system testing, support User Acceptance Testing (UAT), resolve defects, and provide technical evidence required for implementation approval.
• Support controlled production changes, implementation waves, post-deployment validation, and hypercare activities, including timely resolution of implementation defects and stabilization issues.
• Develop and maintain technical documentation, build/configuration records, integration notes, test evidence, runbooks, troubleshooting procedures, and knowledge-transfer materials for operations.
• Work closely with PAM support and operations teams to ensure solutions are supportable and that operational ownership, monitoring, escalation, and recovery procedures are understood before handoff.

Required Qualifications and Skills

• Minimum 5 years of hands-on CyberArk PAM experience, including implementation, configuration, onboarding, troubleshooting, and support of enterprise deployments.
• Strong hands-on experience with privileged account onboarding, password management, session management, policy configuration, connector/platform management, and troubleshooting.
• Strong understanding of Identity and Access Management (IAM) and PAM architecture, privileged identity lifecycle, authentication, authorization, and enterprise access-control patterns.
• Practical experience integrating CyberArk with enterprise target platforms such as Active Directory, Windows, Unix/Linux, databases, and cloud environments.
• Working knowledge of Windows and Linux operating systems, network and data-center concepts, remote administration, and common enterprise infrastructure dependencies.
• Ability to troubleshoot complex technical issues across CyberArk components, target systems, authentication flows, connectivity, and policy configuration.
• Strong technical documentation skills and experience producing implementation procedures, runbooks, test evidence, support documentation, and knowledge-transfer content.
• Strong written and verbal communication skills and the ability to work independently while coordinating effectively with architects, project teams, platform owners, and operations.
• Ability to work effectively during India night-shift hours aligned to the U.S. Eastern Time workday.

Preferred Qualifications

• Experience implementing or supporting CyberArk cloud offerings in large enterprise environments.
• Experience using CyberArk application programming interfaces (APIs), including Representational State Transfer (REST) APIs, to automate repeatable administration or onboarding activities.
• PAM architecture or solution-design experience and the ability to identify implementation trade- offs, prerequisites, and operational impacts.
• Understanding of business, audit, regulatory, and security-control drivers for privileged access.
• CyberArk PAM certification, including CyberArk Certified Delivery Engineer (CDE-PAM / CDE-CPC), or equivalent current CyberArk certification is an asset.
• Bachelor's or Master's degree in Computer Science, Information Systems, Cybersecurity, Engineering, or a related discipline, or equivalent professional experience.