Senior CyberArk PAM Engineer — Privileged Access Expert

GCS Recruitment; United States; Remote; USD 120,000 - 160,000; Full time

Job summary

GCS Recruitment Specialists is seeking a Senior Cyber Security Engineer specializing in privileged access management with CyberArk as the core platform. You will own the design, deployment and health of the security tooling estate across managed clients, with PAM as your deepest expertise.

Beyond CyberArk, the role covers Zscaler (ZIA/ZPA) and a broad modern security stack; hands-on experience with EDR, SIEM, vulnerability management and email security is required to support client connectivity

Qualifications

• 5+ years in security engineering with hands-on CyberArk design/administration (PAM Self-Hosted or Privilege Cloud).
• Experience deploying or operating Zscaler and at least two of EDR, SIEM, vulnerability management, or email security.
• Strong scripting capability (PowerShell or Python) for automation and integration.

Responsibilities

• CyberArk design, deployment and operation across managed clients: vaulting, session management and secrets.
• Design PAM onboarding programmes for new clients including discovery, scoping and rollout.
• Integrate PAM with identity stack (Entra ID, conditional access, MFA).
• Automate deployment and operational tasks; maintain tooling health and integration reliability.
• Act as senior escalation for identity and tooling incidents; document designs and standards.

Skills

CyberArk design & administration

Scripting (PowerShell or Python)

Zscaler deployment (ZIA/ZPA)

Security tooling automation

Multi-client environment experience

Tools

PowerShell

Python

CyberArk Privilege Cloud

Zscaler (ZIA/ZPA)

EDR/SIEM tools

Job description

GCS Recruitment Specialists is seeking a Senior Cyber Security Engineer specializing in privileged access management with CyberArk as the core platform. You will own the design, deployment and health of the security tooling estate across managed clients, with PAM as your deepest expertise.

Beyond CyberArk, the role covers Zscaler (ZIA/ZPA) and a broad modern security stack; hands-on experience with EDR, SIEM, vulnerability management and email security is required to support client connectivity