Senior PAM Engineer – CyberArk

This is a fully remote position, open to applicants in United States.

📋 Description

• Oversee comprehensive CyberArk implementations, upgrades, and migrations in various client settings (on-premises, hybrid, and cloud).

• Design and implement essential CyberArk components: Vault, CPM, PVWA, PSM, PSMP, and PTA.

• Facilitate discovery workshops with client stakeholders to collect requirements and establish PAM strategy and architecture.

• Create and implement onboarding strategies for privileged accounts (Windows, Unix/Linux, databases, network devices, cloud platforms).

• Integrate CyberArk with related systems (SIEM, ITSM, IAM, ticketing tools, AD/LDAP) using REST APIs and connectors.

• Develop platform configurations, custom connectors, and PSM plugins/recordings for non-standard target systems.

• Generate clear, client-ready documentation: solution designs, runbooks, architecture diagrams, and knowledge transfer materials.

• Manage project timelines, scope, and client communications, frequently across multiple simultaneous engagements.

• Resolve complex production issues and provide escalation support.

• Mentor junior engineers and contribute to internal methodologies, accelerators, and best-practice playbooks.

• Remain updated on the CyberArk product roadmap, releases, and emerging PAM/identity security trends.

• Embrace emerging technologies, including AI tools, to enhance efficiency, address challenges, and drive improved business outcomes.

⛳️ Requirements

• 5+ years of practical CyberArk experience, including a minimum of 2+ years in a professional services, consulting, or systems integration environment.

• Proven experience leading or playing a significant role in multiple full-lifecycle CyberArk implementations for various clients.

• Extensive technical knowledge of the CyberArk PAS suite (Vault, CPM, PVWA, PSM, PSMP, PTA/PTA-EPM).

• Experience with platform onboarding across diverse target types (Windows, Unix/Linux, databases, network/security devices, cloud IAM).

• Strong scripting capabilities (PowerShell, Python, or similar) for automation and custom integrations.

• Familiarity with REST APIs and experience in building or supporting CyberArk integrations.

• Exceptional client-facing communication skills — comfortable presenting to both technical teams and executive stakeholders.

• Capability to manage ambiguity, shifting priorities, and multiple client engagements at once.

• Strong documentation skills and meticulous attention to detail.

• CyberArk certifications (CDE, Sentry, Defender, or equivalent) (Preferred).

• Experience with CyberArk cloud offerings (Privilege Cloud, Identity Security Platform) (Preferred).

• Familiarity with other IAM/PAM tools (BeyondTrust, Delinea, SailPoint, Okta) for comparative or migration context (Preferred).

• Experience with DevOps/Secrets Manager use cases (CyberArk Conjur, AAM) (Preferred).

• Background in regulated industries (finance, healthcare, government) and related compliance frameworks (SOX, HIPAA, PCI-DSS) (Preferred).

🏝️ Benefits

• Primarily a remote workforce (U.S. based only, some travel may be required for specific positions, on-site work may be necessary for Federal positions).

• Group Medical Insurance options: Zero Deductible PPO Plan (GuidePoint covers 90% of the premium for employees and 70% for family plans (spouse/children/family) or High Deductible Health Plan with HSA (GuidePoint pays 100% of employee premiums and 75% for family plans (spouse/children/family). For those opting for the High Deductible / HSA plan, GPS will contribute in four equal quarterly installments: ($850 per employee annually / $1750 per family annually (includes spouse/children/family options).

• Group Dental Insurance: GuidePoint covers 100% of the premium for employees and 75% for family plans.

• 12 corporate holidays and a Flexible Time Off (FTO) program.

• Generous mobile phone and home internet allowance.

• Eligibility for retirement plan after 2 months during open enrollment.

• Pet Benefit Option.