Senior CyberArk PAM Architect - Cloud, EPM & JIT

The Planet Group; Bridgewater (MA); On-site; USD 140,000 - 190,000; Full time

Job summary

The Planet Group is seeking a Senior CyberArk PAM Implementation Engineer to assess, optimize, and enhance our CyberArk Privileged Access Management environment. The role will lead or support the design of current-state architecture and a target-state roadmap, emphasizing Cloud, EPM, SIA, and JIT capabilities.

You will onboard applications and service accounts, manage password rotation and privileged session access, and integrate CyberArk with IAM, ITSM, and SIEM platforms.

Qualifications

• 5+ years of hands-on CyberArk PAM engineering.
• Strong CyberArk Cloud/SaaS experience.
• Experience with SIA and JIT implementations.
• CyberArk assessment and architecture review experience.
• Password rotation, reconciliation, and session management.
• Application onboarding and secrets management.
• Windows and Linux administration.
• Cloud integration (Azure, AWS, or GCP).

Responsibilities

• Assess and optimize existing CyberArk environments.
• Design CyberArk target-state architecture and PAM roadmap.
• Implement CyberArk Cloud, SIA, JIT, and EPM solutions.
• Manage password rotation, session monitoring, and secrets management.
• Onboard applications, service accounts, and privileged accounts.
• Integrate CyberArk with IAM, cloud, ITSM, and SIEM platforms.
• Develop automation using PowerShell, Python, and APIs.
• Create standards, SOPs, and governance processes.

Skills

CyberArk PAM implementation

CyberArk EPM

CyberArk SIA

JIT (Just-in-Time Privileged Access)

PSM / PSMP

Account onboarding

Secrets Management

Windows & Linux Privileged Access

PowerShell

Python

REST API Automation

CyberArk Architecture Assessment

PAM Roadmap Development

Tools

PowerShell

Python

REST API

Job description

The Planet Group is seeking a Senior CyberArk PAM Implementation Engineer to assess, optimize, and enhance our CyberArk Privileged Access Management environment. The role will lead or support the design of current-state architecture and a target-state roadmap, emphasizing Cloud, EPM, SIA, and JIT capabilities.

You will onboard applications and service accounts, manage password rotation and privileged session access, and integrate CyberArk with IAM, ITSM, and SIEM platforms.