Senior CyberArk Security Engineer

About the role

We are looking for a Senior CyberArk Security Engineer to lead the design, implementation, and optimization of our Privileged Access Management (PAM) program. This high‑impact position will work across a complex enterprise environment, ensuring secure access to privileged accounts, services, and secrets.

Key responsibilities

• Lead the architecture, deployment, and tuning of CyberArk solutions such as EPV, PSM, CPM, and Conjur.
• Serve as the technical subject‑matter expert for privileged access security and guide enterprise‑wide PAM strategy.
• Drive onboarding, lifecycle management, and automation of privileged accounts across on‑premises and cloud platforms.
• Integrate CyberArk with enterprise tools like ServiceNow, Active Directory, and major cloud services.
• Develop automation frameworks for password rotation, account provisioning, and compliance enforcement.
• Implement session isolation, recording, and continuous control monitoring to meet security policies and regulatory requirements.
• Collaborate with security, infrastructure, and application teams to embed least‑privilege and zero‑trust principles.
• Mentor junior engineers, create documentation, runbooks, and support incident response for privileged credential compromises.

Required profile

• Bachelor’s degree in Business Administration, Finance, Information Technology or a related field (MBA or advanced degree is a plus).
• Advanced proficiency in English (B2/C1 level).
• Proven senior‑level experience designing and managing CyberArk PAM solutions in large enterprises.

Required skills

• CyberArk EPV, PSM, CPM, Conjur.
• ServiceNow integration.
• Active Directory.
• Cloud platforms (e.g., AWS, Azure, GCP).
• Automation scripting for account onboarding and password rotation.
• Session management and monitoring.
• Continuous Control Monitoring (CCM) concepts.