Senior CyberArk PAM & EPM Implementation Engineer

Real; Bridgewater Township (MN); On-site; USD 140,000 - 210,000; Full time

Job summary

Real is seeking a Senior CyberArk PAM & EPM Implementation Engineer in Minnesota to lead assessments, architecture reviews, and roadmaps across PAM and EPM environments.

You will drive automation, integrate CyberArk with Windows and Linux estates, and work with infra, cloud, and IAM teams to improve security maturity and platform adoption.

Qualifications

• 5–8 years of hands-on CyberArk PAM engineering experience.
• Strong expertise in CyberArk Cloud, SIA, JIT Access, CPM, PSM, Secrets Management, and Application Onboarding.
• Experience with Windows and Linux privileged access management.
• Automation and integration using PowerShell, Python, REST APIs, and cloud platforms.
• Preferred certifications: CyberArk Defender, Sentry, Cloud Certification, and/or CISSP.

Responsibilities

• Lead the assessment, optimization, and roadmap for PAM in Cloud/SaaS, SIA, and JIT access.
• Review current CyberArk architecture, configurations, and processes to identify gaps and debt.
• Implement and optimize CPM, PSM, secrets management, and application onboarding.
• Design, deploy, and manage CyberArk EPM with least-privilege policies and agent deployment.
• Collaborate with infra, cloud, and IAM teams; automate integrations via PowerShell, Python, and REST APIs.

Skills

CyberArk PAM engineering

CyberArk Cloud

SIA & JIT Access

CPM & PSM

Secrets Management

Automation (PowerShell, Python)

REST APIs

Windows & Linux PAM

Application Onboarding

Tools

Windows

Linux

Cloud Platforms

Job description

Senior CyberArk PAM & EPM Implementation Engineer

• Lead the assessment, optimization, and enhancement of the organization's CyberArk Privileged Access Management (PAM) environment, with a focus on CyberArk Cloud/SaaS, Secure Infrastructure Access (SIA), and Just-in-Time (JIT) privileged access.

• Review current CyberArk architecture, configurations, integrations, and operational processes to identify security gaps, technical debt, and improvement opportunities, then develop and execute a roadmap to maximize platform adoption and security maturity.

• Implement and optimize CyberArk capabilities including privileged account management, password rotation (CPM), privileged session management (PSM), secrets management, application onboarding, identity platform integrations, SIA deployment, and JIT access workflows.

• Design, deploy, and manage CyberArk Endpoint Privilege Manager (EPM) solutions, including least-privilege policies, application control, privilege elevation workflows, agent deployment, and operational optimization.

• Collaborate with infrastructure, cloud, IAM, and application teams while leveraging PowerShell, Python, APIs, and automation to integrate CyberArk across enterprise environments.

Key Qualifications

• 5-8 years of hands-on CyberArk PAM engineering and implementation experience.
• Strong expertise in CyberArk Cloud, SIA, JIT Access, CPM, PSM, Secrets Management, and Application Onboarding.
• Experience with Windows and Linux privileged access management.
• Automation and integration experience using PowerShell, Python, REST APIs, and cloud platforms.
• Preferred certifications: CyberArk Defender, Sentry, Cloud Certification, and/or CISSP.

Ideal Candidate Profile

A senior CyberArk specialist who can assess existing environments, define future-state architecture, lead implementations, automate integrations, and drive enterprise-wide PAM and endpoint privilege management initiatives while engaging effectively with technical and business stakeholders.

EOE Statement: Specialist Staffing Group is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or veteran status.

In addition to base pay, employees may be eligible for benefits such as health insurance, health savings accounts, retirement savings plans, life and disability insurance, and paid leave where required by applicable law. Eligibility may vary based on factors such as location and hire date and is subject to change.