PAM & NHI Identity Engineer (CyberArk)

Ralliant; United States; Hybrid; USD 150,000 - 210,000; Full time

Benefits offered by this job

Bonus eligibility

Job summary

Ralliant is seeking an Identity Engineer to administer and secure PAM and non-human identities across on-prem, cloud, and hybrid environments. You will implement least-privilege access, automate onboarding and rotation, and own credential hygiene using CyberArk and secret-management tooling.

You will collaborate with Security, Infra, and App teams, ensuring compliant access controls and scalable identity practices across regions and OpCos.

Qualifications

• Bachelor's degree recommended; equivalent experience considered.
• 10+ years in cybersecurity, IAM, or IT with 5+ years hands-on CyberArk Privileged Cloud.
• Strong understanding of Privileged Access Security architecture (Vault/PSM/CPM).
• Experience managing non-human identities (service accounts, API keys, secrets).
• Familiarity with secrets management tooling and CI/CD credential hygiene.
• Proficiency in TCP/IP networking, firewalls, DNS/cert troubleshooting.
• Experience with AD/LDAP, Entra ID, SAML, OAuth 2.0, MFA, SSO.
• Scripting in PowerShell and Python; REST APIs.
• Experience with log analysis, SIEM, incident response.
• Knowledge of SOX, PCI-DSS, NIST, ISO 27001; zero-trust.
• Certifications (CyberArk Trustee or higher) a plus; cloud certs helpful.
• Strong communication and ability to train teams.
• Ability to operate across enterprise and OpCo in multiple time zones.
• Alignment with Ralliant values and RBS.

Responsibilities

• Administer CyberArk Privileged Cloud platform and vault operations.
• Configure policies for onboarding, rotation, and least-privilege access.
• Own non-human identity management end-to-end.
• Govern NHI lifecycle: discovery, rotation, expiration, decommissioning.
• Manage secrets and vaulting for apps and CI/CD pipelines.
• Troubleshoot PSM/CPM, remote access, and connectivity issues.
• Support AD/LDAP, SAML, OAuth 2.0, MFA, SSO integrations.
• Develop PowerShell and Python scripts for onboarding, rotation, and reporting.
• Monitor logs, SIEM, and incident response focused on privileged access.
• Document procedures and train owners and DevOps teams.

Skills

Cybersecurity IAM

PAM

Non-human Identities

PowerShell

Python

REST APIs

Scripting

SIEM

Zero Trust

Education

Bachelor's degree

Tools

CyberArk Privileged Cloud

CyberArk Conjur/Secrets Hub

HashiCorp Vault

Job description

Ralliant is seeking an Identity Engineer to administer and secure PAM and non-human identities across on-prem, cloud, and hybrid environments. You will implement least-privilege access, automate onboarding and rotation, and own credential hygiene using CyberArk and secret-management tooling.

You will collaborate with Security, Infra, and App teams, ensuring compliant access controls and scalable identity practices across regions and OpCos.