IT Security Engineer

Key responsibilities will be as follows:

• Manage and operate CyberArk PAM solution components including Password Vault Server, Central Policy Manager (CPM), and Privileged Session Manager (PSM)


• Implement and maintain password vaulting strategies for diverse secret types including AD service accounts, API keys, SSH certificates, database credentials, and application passwords


• Configure and optimize automated password rotation policies, managing complex dependency executions


• Work with application teams to design and implement secure credential retrieval workflows using CyberArk's credential providers including Central Credential Provider (CCP) 


• Monitor and troubleshoot PAM operations, ensuring 99.5%+ system availability and rapid incident resolution


• Collaborate with application teams, infrastructure engineers, and security architects to integrate PAM solutions into existing and new systems


• Document operational procedures


• Support compliance initiatives by maintaining audit trails and access logs for privileged account usage

Education Requirements:

• Bachelor's degree in Computer Science, Information Security, Information Technology, or related field

Experience Requirements:

• Overall 2-5 years of experience in cybersecurity, systems administration, or PAM technologies


• Minimum 2+ years of hands-on experience with CyberArk PAM solution in production environments

Expertise/Required Skills:

• CyberArk PAM architecture and core components (Vault, CPM, PSM, PVWA)


• Password vaulting methodologies and secret lifecycle management


• Automated password rotation configuration and dependency management


• CyberArk credential provider implementations (CCP API, CP, REST API integrations)


• Standard secret types management including – AD/LDAP service accounts, API keys and tokens for cloud and application services, SSH certificates and private keys, Database credentials, application-specific credentials etc. 

• Technical proficiency in:
  
  
  
  • CyberArk policy configuration and platform management
  
  
  • Dependency mapping and rotation impact analysis
  
  
  • PowerShell, Python, or similar scripting languages for automation
  
  
  • LDAP/Active Directory integration and authentication protocols
  
  

• Operational skills:
  
  
  
  • Incident response and troubleshooting for PAM-related issues
  
  
  • Change management processes for privileged access modifications
  
  
  • Strong analytical and problem-solving capabilities
  
  
  • 
    

    Effective communication skills for technical documentation and cross-team collaboration

    
    

     

  
  


• Preferred/Nice-to-Have Skills:
  
  
  
  • Experience with CyberArk Secrets Manager for DevOps and cloud-native applications
  
  
  • Familiarity with CyberArk Endpoint Privilege Manager (EPM) solution
  
  
  • Basic experience in CyberArk infrastructure component installation and hardening procedures
  
  
  • Experience with cloud platforms (AWS, Azure, GCP) and their native secret management services
  
  
  • Windows Server and Linux system administration
  
  
  • Network security concepts and access control methodologies
  
  
  • Performance monitoring and capacity planning for PAM infrastructure
  
  
  • LDAP/Active Directory integration and authentication protocols