CyberArk Privilege Cloud Engineer

We are seeking an experienced CyberArk Privilege Cloud Consultant to design, implement, and optimize privileged access management (PAM) solutions using CyberArk Privilege Cloud. The ideal candidate will have deep expertise in modern CyberArk SaaS capabilities, including Connectors, Secure Infrastructure Access (SIA), CyberArk Code Pass, SaaS (SaaS-based PAM services), and Zero Standing Privileges (ZSP). This role requires strong consulting and implementation experience, and preferably a consultant with a CyberArk Certified Delivery Engineer (CDE) certification.

Key Responsibilities

• Lead design and deployment of CyberArk Privilege Cloud (PrivCloud) environments in enterprise settings.
• Implement and manage CyberArk Connectors to enable secure communication between cloud and on-premises systems.
• Configure and optimize Secure Infrastructure Access (SIA) for passwordless, identity-based access to servers and infrastructure.
• Deploy and integrate CyberArk Code Pass for secrets management within CI/CD pipelines and DevOps environments.
• Implement and support CyberArk SaaS (SaaS-based PAM platform) capabilities across hybrid and multi-cloud environments.
• Design and enforce Zero Standing Privileges (ZSP) frameworks to eliminate persistent privileged access and improve security posture.
• Conduct security assessments, gap analysis, and PAM maturity evaluations.
• Architect role-based access control (RBAC), session management, and privileged session monitoring solutions.
• Integrate CyberArk Privilege Cloud with enterprise identity providers (e.g., Azure AD, Okta).
• Provide troubleshooting, performance tuning, and operational support for PAM solutions.
• Create and maintain technical documentation, runbooks, and standard operating procedures.
• Act as a trusted advisor to clients and stakeholders on PAM strategy and roadmap.

Required Qualifications

• Proven experience implementing CyberArk Privilege Cloud (PrivCloud) solutions.
• Hands-on expertise with:

• CyberArk Connectors
• Secure Infrastructure Access (SIA)
• CyberArk Code Pass
• CyberArk SaaS platform capabilities
• Zero Standing Privileges (ZSP)

• Excellent communication and client-facing consulting skills
• Strong understanding of privileged access management, identity security, and zero trust principles.
• Experience with cloud platforms (Azure, AWS, or Google Cloud Platform).
• Familiarity with DevOps tools (e.g., Jenkins, GitHub, GitLab, Kubernetes).
• Experience with authentication protocols (SAML, OAuth, OIDC, LDAP).
• Scripting experience (PowerShell, Python, or similar).

Preferred Qualifications

• CyberArk Certified Delivery Engineer (CDE) certification.

• Additional CyberArk certifications (e.g., Defender, Sentry).

• Experience with Secrets Management and Application Access Manager (AAM).
• Knowledge of regulatory frameworks (e.g., NIST, ISO 27001, SOX).
• Experience implementing PAM in large-scale enterprise environments.
• Familiarity with Zero Trust architecture models.

Key Skills

• Strong analytical and problem-solving abilities
• Excellent communication and client-facing consulting skills
• Ability to translate business requirements into technical solutions
• Strong documentation and presentation skills

Education

• Bachelor's degree in Computer Science, Information Security, or related field (or equivalent experience)