IAM Engineer CyberArk

We are seeking an experienced Identity & Access Management (IAM) Engineer – CyberArk to design, implement, administer, and support CyberArk Privileged Access Management (PAM) solutions. The ideal candidate will have hands-on experience with CyberArk components, privileged account management, and enterprise security best practices. This role involves collaborating with security, infrastructure, and application teams to secure privileged identities and ensure compliance with organizational security standards.

Key Responsibilities

• Design, implement, configure, and administer CyberArk PAM solutions.
• Install, upgrade, and maintain CyberArk components, including:
• Digital Vault
• Privileged Session Manager (PSM)
• Central Policy Manager (CPM)
• Password Vault Web Access (PVWA)
• Privileged Threat Analytics (PTA) (preferred)
• Identity Security Platform (preferred)
• Onboard privileged accounts, servers, databases, network devices, cloud platforms, and applications into CyberArk.
• Configure safes, platforms, password policies, account groups, and access controls.
• Integrate CyberArk with Active Directory, LDAP, Azure AD, and other identity providers.
• Implement password rotation, credential management, and privileged session management.
• Troubleshoot CyberArk infrastructure, authentication, connectivity, and password management issues.
• Perform CyberArk upgrades, migrations, patching, and disaster recovery activities.
• Develop PowerShell or REST API scripts to automate CyberArk administrative tasks.
• Collaborate with IAM, Security Operations, Infrastructure, and Application teams to support onboarding and integration activities.
• Ensure compliance with security policies, audit requirements, and regulatory standards.
• Create and maintain technical documentation, SOPs, and operational runbooks.
  

Required Qualifications

• 7 years of hands-on experience with CyberArk development, administration, configuration, and implementation.
• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• 5 years of experience in Identity & Access Management (IAM) or Privileged Access Management (PAM).
• Strong experience with CyberArk components including Vault, CPM, PVWA, and PSM.
• Experience integrating CyberArk with Active Directory, LDAP, Azure AD, or other identity platforms.
• Experience onboarding Windows, Linux/Unix, databases, network devices, and cloud accounts.
• Strong knowledge of privileged access management concepts and security best practices.
• Experience with PowerShell, REST APIs, or scripting for automation.
• Knowledge of Windows Server, Linux/Unix administration, and networking fundamentals.
• Excellent troubleshooting, analytical, and problem-solving skills.
• Strong verbal and written communication skills.
  
  

Skills: cyberark,central policy manager,access,privileged session manager,iam,management