Identity & Access Management - PAM Engineer

Overview

The Opportunity:

The Identity & Access Management Engineer implements, coordinates, and onboards all aspects and phases of the CyberArk's Privileged Access Management (PAM) on-prem and privilege cloud solution rollout, and CyberArk operational tasks. As part of the broader Information Security organization, you will apply fundamental systems security understanding, skills, and experience to maintain and operate complex information systems and security tools that satisfy organizational mission and our requirements, including partner protection needs and security requirements. You will report to the Vice President, Infrastructure Security.

The Day-to-Day:

n
• Onboard and provision users, store service accounts and password rotations, manage credentials, including those that are interactive, non-interactive, and API-based
n
• Implement privileged access management programs to improve our broader security posture, demonstrated by metrics
n
• Manage configuration, administration, and maintenance of CyberArk solution, including both the infrastructure and the application itself
n
• Oversee the relevant documentation and training required for privileged access management solutions and processes, including define and help develop policies and control standards
n
• Report progress and system health through metrics and KPIs that are risk-driven and operational in nature
n
• Address ticket queue and follow appropriate change management procedures
n
• Understand risk and make recommendations for enhancing systems security and processes
n
• Keep up on current security technologies and maintain awareness of industry trends and threats, and industry best practices, providing input focusing on IAM/PAM technologies, offer subject matter expertise where relevant
n

Your Qualifications:

n
• 5+ years of hands-on experience with CyberArk (CyberArk Cloud Platform, EPM, LCD, and CyberArk SaaS Cloud Base)
n
• 3+ years of experience implementing enterprise-wide privileged access management technology solution adoption across medium- to large-scale companies
n
• 3+ years of experience as a systems engineer at a medium- to large-scale company in Financial Services
n
• 1+ years of hands-on experience with IGA systems such as SailPoint
n
• Experience with password repository technologies and remote session governance, specifically with the policies that govern target system platforms
n
• Excellent knowledge in IAM & PAM ecosystem (technology, standards, implementations, migration, and operational)
n
• Strong experience installing, upgrading, configuring, operating, and troubleshooting experience with CyberArk AAM (CCP, CP, ASCP), EPV, PVWA, CPM, PSM, HTML5 Gateway, PSMP, PTA (with various versions)
n
• Strong experience in DNA, Discovery scan and automate