CyberArk Engineer

One of our clients is looking for an experienced CyberArk Engineer with strong expertise in Cloud Privileged Access Management (PAM) and CyberArk SaaS/cloud solutions. The ideal candidate will have hands-on experience implementing and managing CyberArk solutions across AWS, Azure, and GCP environments.

The role involves securing privileged identities, onboarding cloud accounts and applications, implementing Just-In-Time (JIT) access and Zero Standing Privileges (ZSP), and integrating CyberArk with cloud-native environments.

• Implement and manage CyberArk Privilege Cloud for cloud-based privileged access management.
• Configure and manage CyberArk Secure Infrastructure Access (SIA) and Secure Cloud Access (SCA) capabilities.
• Onboard and secure privileged accounts across AWS, Azure, and GCP environments.
• Configure cloud account discovery and account onboarding workflows.
• Implement password rotation, credential management, and privileged account controls.
• Secure cloud administrator accounts, service accounts, application identities, and machine identities.
• Implement Just-In-Time (JIT) privileged access models.
• Design and implement Zero Standing Privileges (ZSP) for cloud environments.
• Configure temporary privileged access with appropriate approval and access workflows.
• Implement CyberArk Privilege Cloud/SaaS-based SCA and SIA modules.
• Perform application onboarding into CyberArk and configure appropriate access policies.
• Support secrets management and secure storage of privileged credentials.
• Integrate CyberArk with cloud-native services and identity platforms.
• Troubleshoot access, onboarding, authentication, and integration issues.
• Work with security, cloud, infrastructure, and IAM teams to implement privileged access controls.
• Maintain documentation for CyberArk configurations, onboarding processes, access policies, and operational procedures.

• 8–13 years of experience in CyberArk/PAM engineering.
• Strong hands-on experience with CyberArk Privilege Cloud.
• Hands-on experience with CyberArk Secure Infrastructure Access (SIA).
• Hands-on experience with CyberArk Secure Cloud Access (SCA).
• Strong understanding of Cloud PAM and privileged identity management.
• Experience onboarding and securing privileged accounts across AWS, Azure, and GCP.
• Experience with cloud account discovery and onboarding workflows.
• Experience implementing JIT access and Zero Standing Privileges (ZSP).
• Strong experience in application onboarding.
• Experience with password rotation and credential management.
• Understanding of secrets management and machine/application identities.
• Experience with CyberArk SaaS/Privilege Cloud implementations.
• Strong understanding of cloud security and identity management concepts.

• Experience with CyberArk Conjur.
• Experience integrating CyberArk with cloud-native IAM services.
• Knowledge of DevOps and CI/CD environments.
• Familiarity with cloud security best practices across AWS, Azure, and GCP.
• Experience working with enterprise IAM/PAM transformation projects.

We are looking for professionals who have hands-on implementation experience, particularly with CyberArk Privilege Cloud, SIA, and SCA, rather than candidates with only administration or monitoring exposure.

Apply if you have strong practical experience in CyberArk Cloud PAM and securing privileged identities across multi-cloud environments.