Senior CyberArk PAM Engineer - Onsite (Phoenix/Dallas)

SFE; Dallas (TX); On-site; USD 110,000 - 160,000; Full time

Job summary

SFE seeks an experienced PAM Engineer to design, implement, and support CyberArk across enterprise environments onsite in Dallas, TX or Phoenix, AZ. The role emphasizes onboarding critical systems, enforcing least privilege, and enabling secure privileged access with IAM and MFA integrations.

Ideal candidates have 8+ years in Cyber Security with 3+ years CyberArk administration, strong scripting skills, and a drive for security governance and compliance.

Qualifications

• 8+ years in Cyber Security with at least 3+ years CyberArk admin experience.
• Hands-on CyberArk Vault, PVWA, CPM, PSM, PTA, EPM proficiency.
• Experience integrating CyberArk with AD and MFA.
• Strong scripting (PowerShell, Python) for automation.
• Knowledge of IAM concepts and least privilege security.

Responsibilities

• Design, implement, administer, and support CyberArk PAM across enterprise env.
• Onboard servers, databases, apps, networks, and cloud into CyberArk.
• Configure Vault, PVWA, CPM, PSM, PTA, EPM; manage password rotations.
• Enforce least privilege, privileged account governance, and monitoring.
• Support audits, SOX, PCI-DSS, NIST, ISO 27001 compliance.
• Develop automation scripts for onboarding, reporting, and ops tasks.
• Create runbooks and technical docs; perform health checks and upgrades.

Skills

CyberArk PAM

CyberArk Vault

PVWA

CPM

PSM

PTA

EPM

Windows/Linux

IAM concepts

Active Directory

MFA integration

PowerShell

Python

Automation

Education

Bachelor's degree in Computer Science or related field

Tools

Azure Entra ID (Azure AD)

LDAP

ServiceNow

SailPoint

Saviynt

Okta

Job description

SFE seeks an experienced PAM Engineer to design, implement, and support CyberArk across enterprise environments onsite in Dallas, TX or Phoenix, AZ. The role emphasizes onboarding critical systems, enforcing least privilege, and enabling secure privileged access with IAM and MFA integrations.

Ideal candidates have 8+ years in Cyber Security with 3+ years CyberArk administration, strong scripting skills, and a drive for security governance and compliance.