Senior CyberArk PAM & EPM Implementation Engineer 3672272

Be Part Of A High-Performing Team

Join a cybersecurity organization supporting a global biopharmaceutical enterprise as it expands the capabilities of an established privileged-access environment. This is a highly visible initiative with attention from senior IT leadership and a clear mandate to move beyond basic password-management functionality into a broader CyberArk PAM Cloud implementation.

The engineer will serve as the primary technical architect and hands-on implementer, supported by an existing global CyberArk operations team. This role is ideal for someone who can independently evaluate an environment, determine what needs to change, design the solution, and then personally drive implementation across applications, infrastructure, service accounts, secrets, and cloud platforms.

What's In Store For You

• Engagement: W2 only (no C2C/1099)
• Preferred work model: Hybrid in Bridgewater, New Jersey
• Local candidates are strongly preferred.
• The preferred schedule is approximately 3 days onsite per week during the first 3 months, transitioning to approximately 1 day onsite per week after the initial ramp-up period.
• Highly qualified remote candidates may also be considered.
• Full-time engagement supporting U.S. business hours.
• Initial 12-month assignment with potential for extension based on business needs and performance.

How You Will Make An Impact

• Evaluate the existing CyberArk PAM Cloud environment and determine where functionality, integrations, or controls can be expanded or improved.
• Define and evolve the CyberArk PAM Cloud architecture based on current business and security requirements.
• Serve as the primary hands-on implementation resource for PAM expansion initiatives.
• Extend privileged-account management beyond local administrator password rotation into broader enterprise use cases.
• Implement service-account password rotation and coordinate application integrations with technical teams across the organization.
• Onboard applications, privileged accounts, administrative accounts, and infrastructure into CyberArk.
• Implement privileged-access workflows for Windows, Linux, and Unix environments.
• Expand secure application and administrator access through CyberArk.
• Implement and optimize secrets-management capabilities and integrate CyberArk secrets functionality with cloud environments.
• Enable key and credential retrieval, storage, and rotation for cloud-based applications.
• Work independently while coordinating across application, infrastructure, IAM, cloud, and cybersecurity teams.
• Provide architecture direction, implementation recommendations, and technical leadership to the existing CyberArk support organization.
• Support CyberArk EPM use cases and policy expansion where applicable.

Do You Bring Proven Success Implementing CyberArk PAM Cloud?

• 5-8+ years of hands-on CyberArk PAM implementation and engineering experience.
• Strong recent experience implementing CyberArk PAM Cloud/SaaS.
• Experience architecting CyberArk PAM Cloud environments.
• Proven experience implementing multiple CyberArk PAM Cloud projects.
• Ability to assess an existing PAM environment and determine technical and functional gaps.
• Hands-on experience with service-account password rotation and application integrations.
• Experience onboarding privileged accounts, applications, administrators, and enterprise systems into CyberArk.
• Experience with Windows and Linux/Unix privileged-access environments.
• Hands-on knowledge of CyberArk secrets management and cloud credential/key integration.
• Experience coordinating implementation work across application, infrastructure, IAM, cloud, and cybersecurity teams.
• Ability to work independently and take ownership of implementation from design through delivery.
• Strong communication, collaboration, and problem-solving skills.
• CyberArk EPM experience is strongly preferred but may not be required for an otherwise highly qualified PAM Cloud engineer.
• Relevant CyberArk certifications or implementation credentials are preferred.

#dice