IT Security Engineer

Key responsibilities will be as follows:

• Manage and operate CyberArk PAM solution components including Password Vault Server, Central Policy Manager (CPM), and Privileged Session Manager (PSM)

• Implement and maintain password vaulting strategies for diverse secret types including AD service accounts, API keys, SSH certificates, database credentials, and application passwords

• Configure and optimize automated password rotation policies, managing complex dependency executions

• Work with application teams to design and implement secure credential retrieval workflows using CyberArk's credential providers including Central Credential Provider (CCP)

• Monitor and troubleshoot PAM operations, ensuring 99.5%+ system availability and rapid incident resolution

• Collaborate with application teams, infrastructure engineers, and security architects to integrate PAM solutions into existing and new systems

• Document operational procedures

• Support compliance initiatives by maintaining audit trails and access logs for privileged account usage

Qualifications

• Bachelor's degree in Computer Science, Information Security, Information Technology, or related field

Experience Requirements:

• Overall 2-5 years of experience in cybersecurity, systems administration, or PAM technologies

• Minimum 2+ years of hands-on experience with CyberArk PAM solution in production environments

Expertise/Required Skills:

• CyberArk PAM architecture and core components (Vault, CPM, PSM, PVWA)

• Password vaulting methodologies and secret lifecycle management

• Automated password rotation configuration and dependency management

• CyberArk credential provider implementations (CCP API, CP, REST API integrations)

• Standard secret types management including – AD/LDAP service accounts, API keys and tokens for cloud and application services, SSH certificates and private keys, Database credentials, application-specific credentials etc.

• Technical proficiency in:

• CyberArk policy configuration and platform management

• Dependency mapping and rotation impact analysis

• PowerShell, Python, or similar scripting languages for automation

• LDAP/Active Directory integration and authentication protocols

• Operational skills:

• Incident response and troubleshooting for PAM-related issues

• Change management processes for privileged access modifications

• Strong analytical and problem-solving capabilities

• Effective communication skills for technical documentation and cross-team collaboration

• Preferred/Nice-to-Have Skills:

• Experience with CyberArk Secrets Manager for DevOps and cloud-native applications

• Familiarity with CyberArk Endpoint Privilege Manager (EPM) solution

• Basic experience in CyberArk infrastructure component installation and hardening procedures

• Experience with cloud platforms (AWS, Azure, GCP) and their native secret management services

• Windows Server and Linux system administration

• Network security concepts and access control methodologies

• Performance monitoring and capacity planning for PAM infrastructure

• LDAP/Active Directory integration and authentication protocols