Senior CyberArk Engineer

Gotham Technology Group; Newark (NJ); Hybrid; USD 140,000 - 190,000; Full time

Job summary

Gotham Technology Group in Newark, NJ seeks a Senior CyberArk Engineer / Technical Lead to design, implement and operate a large CyberArk PAM environment in a hands-on leadership role.

You will mentor engineers, lead complex PAM projects, collaborate with IAM, Security, and Ops teams, and drive standards, automation, and operational excellence.

This contract-to-hire engagement is hybrid with ~3 days onsite weekly and requires 7+ years in cybersecurity and 5+ years CyberArk experience.

Qualifications

• 7+ years of experience in cybersecurity, identity and access management, privileged access management, or infrastructure engineering.
• 5+ years of hands-on CyberArk experience in a large enterprise environment.
• Deep experience implementing, configuring, administering, upgrading, and troubleshooting CyberArk PAM.
• Demonstrated experience with large-scale privileged account and service-account onboarding.
• Strong understanding of Privileged Access Management, identity security, authentication, authorization, credential management, session management, and least-privilege principles.
• Hands-on experience supporting privileged access across enterprise servers, applications, databases, infrastructure, and service accounts.
• Experience troubleshooting complex CyberArk and PAM issues independently, including the ability to perform root-cause analysis.
• Demonstrated ability to lead technical implementations and initiatives from design through production.
• Experience mentoring engineers and providing technical direction within an engineering team.

Responsibilities

• Design, configure, implement, administer, maintain, and troubleshoot CyberArk PAM solutions across a large enterprise environment.
• Lead the onboarding, management, and lifecycle administration of privileged accounts, service accounts, applications, servers, databases, and other privileged assets.
• Configure and manage CyberArk components, including Enterprise Password Vault (EPV), Privileged Session Manager (PSM), Privileged Account Security (PAS), safes, platforms, policies, authentication methods, and access workflows.
• Troubleshoot complex CyberArk, privileged-access, authentication, and session-management issues and provide hands-on technical support to engineering and security teams.
• Lead complex PAM implementations, integrations, migrations, upgrades, and enhancements through completion.
• Establish and maintain CyberArk engineering standards, configuration guidelines, operational procedures, and best practices.
• Serve as a senior technical escalation point for complex CyberArk and privileged-access issues.
• Provide technical leadership, mentoring, and guidance to junior and mid-level CyberArk engineers.
• Partner with IAM, Information Security, Infrastructure, Application, Cloud, Network, Database, and Operations teams to implement and support privileged-access solutions.
• Collaborate with SailPoint/IGA and SSO teams to integrate privileged access with identity governance, authentication, certification, and access-management processes.
• Develop and implement opportunities for automation, scalability, security improvements, and operational efficiency using scripting, APIs, and other engineering approaches.
• Participate in CyberArk architecture and design discussions while remaining actively involved in hands-on implementation and engineering.
• Help define and execute the technical roadmap for the organization's CyberArk/PAM environment.
• Support security incidents, root-cause analysis, remediation, and investigations involving privileged accounts and access.
• Develop and maintain technical documentation, including architecture diagrams, configurations, implementation procedures, operational runbooks, and troubleshooting guides.
• Evaluate new CyberArk capabilities and recommend improvements based on enterprise security and operational requirements.

Skills

Technical leadership

Mentoring

Communication

Education

CyberArk Defender/Sentry/Trustee certifications

Tools

CyberArk PAM

EPV

PSM

PAS

Job description

Senior CyberArk Engineer / Technical Lead

Location: Newark, NJ

Work Arrangement: Hybrid – approximately 3 days onsite per week

Employment Type: 12+ Month Contract-to-Hire

Position Overview

Our client is seeking a Senior CyberArk Engineer / Technical Lead to join their large enterprise cybersecurity and identity transformation program.

This is a hands-on technical leadership role responsible for engineering, implementing, administering, troubleshooting, and continuously improving a large-scale CyberArk Privileged Access Management (PAM) environment.

The ideal candidate will bring deep, enterprise-level CyberArk expertise and the ability to operate at both the engineering and technical-leadership levels. This person will work directly in the CyberArk platform, lead complex implementations, troubleshoot challenging PAM issues, establish engineering standards, mentor other engineers, and help shape the future direction of the organization's PAM capabilities.

This is not a purely architectural, governance, or strategy role. The successful candidate must be comfortable working hands-on in CyberArk and driving technical initiatives from design through implementation and operational support.

Key Responsibilities

• Design, configure, implement, administer, maintain, and troubleshoot CyberArk PAM solutions across a large enterprise environment.
• Lead the onboarding, management, and lifecycle administration of privileged accounts, service accounts, applications, servers, databases, and other privileged assets.
• Configure and manage CyberArk components, including Enterprise Password Vault (EPV), Privileged Session Manager (PSM), Privileged Account Security (PAS), safes, platforms, policies, authentication methods, and access workflows.
• Troubleshoot complex CyberArk, privileged-access, authentication, and session-management issues and provide hands-on technical support to engineering and security teams.
• Lead complex PAM implementations, integrations, migrations, upgrades, and enhancements through completion.
• Establish and maintain CyberArk engineering standards, configuration guidelines, operational procedures, and best practices.
• Serve as a senior technical escalation point for complex CyberArk and privileged-access issues.
• Provide technical leadership, mentoring, and guidance to junior and mid-level CyberArk engineers.
• Partner with IAM, Information Security, Infrastructure, Application, Cloud, Network, Database, and Operations teams to implement and support privileged-access solutions.
• Collaborate with SailPoint/IGA and SSO teams to integrate privileged access with identity governance, authentication, certification, and access-management processes.
• Develop and implement opportunities for automation, scalability, security improvements, and operational efficiency using scripting, APIs, and other engineering approaches.
• Participate in CyberArk architecture and design discussions while remaining actively involved in hands-on implementation and engineering.
• Help define and execute the technical roadmap for the organization's CyberArk/PAM environment.
• Support security incidents, root-cause analysis, remediation, and investigations involving privileged accounts and access.
• Develop and maintain technical documentation, including architecture diagrams, configurations, implementation procedures, operational runbooks, and troubleshooting guides.
• Evaluate new CyberArk capabilities and recommend improvements based on enterprise security and operational requirements.

Required Qualifications

• 7+ years of experience in cybersecurity, identity and access management, privileged access management, or infrastructure engineering.
• 5+ years of hands-on CyberArk experience in a large enterprise environment.
• Deep experience implementing, configuring, administering, upgrading, and troubleshooting CyberArk PAM.
• Demonstrated experience with large-scale privileged account and service-account onboarding.
• Strong understanding of Privileged Access Management, identity security, authentication, authorization, credential management, session management, and least-privilege principles.
• Hands-on experience supporting privileged access across enterprise servers, applications, databases, infrastructure, and service accounts.
• Experience troubleshooting complex CyberArk and PAM issues independently, including the ability to perform root-cause analysis.
• Demonstrated ability to lead technical implementations and initiatives from design through production.
• Experience mentoring engineers and providing technical direction within an engineering team.Strong communication and collaboration skills, with the ability to work effectively with both technical teams and senior stakeholders.

Preferred Qualifications

• CyberArk certifications such as Defender, Sentry, or Trustee.
• Experience with SailPoint IdentityIQ/IdentityNow or other enterprise IGA platforms.
• Experience with enterprise IAM and SSO platforms.
• Experience integrating CyberArk with Active Directory, LDAP, SSO, MFA, SIEM, ticketing platforms, and other enterprise security technologies.
• Strong experience with CyberArk Enterprise Password Vault (EPV), Privileged Session Manager (PSM), and related PAM capabilities.
• Experience with CyberArk upgrades, migrations, disaster recovery, high availability, and enterprise-scale deployments.
• Experience developing automation using PowerShell, Python, REST APIs, or similar technologies.
• Experience working in large, complex, highly regulated, or critical-infrastructure environments.
• Experience supporting OT/ICS/SCADA environments.
• Experience developing and executing multi-year CyberArk/PAM technical roadmaps.
• Previous experience serving as a CyberArk technical lead or senior engineering lead.