Job Description

Our client is looking for a well-qualified CyberArk Engineer.

The SI is Inetum, and the end client is Avangrid.

Job Description: CyberArk Engineer

Position Overview

We are seeking a highly skilled CyberArk Engineer to design, implement, and maintain our Privileged Access Management (PAM) platform. The ideal candidate will have deep expertise in CyberArk solutions and a proven track record of securing enterprise environments. This role involves working across teams to ensure the security, availability, and scalability of privileged access systems in both on-premises and cloud environments.

Key Responsibilities

• Design, Deploy, and Manage CyberArk Components: Oversee the full lifecycle of CyberArk Vault, Central Policy Manager (CPM), Password Vault Web Access (PVWA), Privileged Session Manager (PSM), and Privileged Threat Analytics (PTA).
• System Upgrades & Maintenance: Perform CyberArk system upgrades, patches, and configuration enhancements to ensure reliability and compliance.
• Connector & Integration Development: Build and maintain custom connectors, APIs, and scripts to integrate CyberArk with other enterprise systems (e.g., ServiceNow, Active Directory, SIEM platforms, and cloud providers).
• Privileged Session Monitoring: Configure and maintain session recording and auditing solutions; analyze logs for compliance and security threats.
• Access Management: Onboard privileged accounts, vault credentials, and manage policies to enforce least privilege access.
• Testing & Deployment: Conduct pre-production testing, quality assurance, and controlled deployments of new features and updates.
• Incident Response: Collaborate with the security operations team to investigate and remediate PAM-related incidents.
• Documentation & Governance: Maintain detailed documentation of PAM configurations, processes, and procedures; ensure alignment with compliance and audit requirements.
• Collaboration: Work closely with IT, DevOps, and Security teams to support hybrid cloud/on-prem environments and integrate PAM into broader identity and access management (IAM) strategies.

Requirements

• Experience: Minimum 3+ years in administration, evolution, or engineering of PAM platforms, preferably CyberArk.
• CyberArk Expertise: Strong knowledge of CyberArk Vault, CPM, PVWA, PSM, PTA, PSMP, and associated communications.
• Technical Skills: Proven experience installing/configuring PSM/PSMP and performing version upgrades; hands-on scripting with PowerShell, Bash, or Python; development of custom connectors, API integrations, and automation scripts.
• Deployment & Operations: Experience with pre-production testing, controlled deployments, and change management.
• Security Awareness: Strong understanding of privileged account security, credential lifecycle management, and compliance requirements (e.g., SOX, HIPAA, PCI-DSS).

Preferred Qualifications

• Certifications: CyberArk Defender, Sentry, or higher certifications.
• Cloud & Automation: Experience with PAM in hybrid cloud environments (AWS, Azure, GCP); infrastructure-as-code tools such as Ansible, Terraform, or CloudFormation.
• Identity Management: Familiarity with identity governance, SSO, MFA, and integration with enterprise IAM platforms.
• Monitoring & Logging: Experience integrating CyberArk with SIEM solutions (Splunk, QRadar, etc.) and monitoring tools.
• Soft Skills: Strong problem-solving abilities, effective communication, and the ability to work independently and in teams.

Education

Bachelor's degree in Computer Science, Information Security, or a related field (or equivalent professional experience).

Employment Details

• Job Type: Possible Contract-To-Hire after 6 months (depending on business need)
• Location: Remote within the USA

Job Tags

Contract work, Remote work,

Similar Jobs