POSITION OVERVIEW
We are seeking an expert CyberArk Engineer specializing in Privileged Session Management (PSM) to anchor our next-generation PAM expansion initiative. In this critical role, you will take ownership of the PSM ecosystem—leading web connector development via a standardized Factory model, streamlining intake requests, engineering complex thick client integrations, and driving rigorous capacity and architectural planning.
KEY RESPONSIBILITIES
1. PSM Web Connector Assessment & Factory Template Development
• Evaluate target web applications to determine integration pathways and establish secure, automated privileged session flows.
• Design, develop, test, and deploy robust custom CyberArk PSM Web Connectors using Selenium, AutoIt, and web automation frameworks.
• Build and maintain a scalable Web Connector Factory template to accelerate onboarding and standardize code quality across teams.
• Manage the end-to-end connector intake request queue, collaborating with application owners to scope requirements and deliver timely automated solutions.
2. PSM Thick Client Development & Engineering
• Architect, configure, and publish non-standard PSM thick client applications (e.g., SQL Server Management Studio, Oracle SQL Developer, custom client binaries via RDP/SSH).
• Harden PSM servers, configure security policies, and enforce comprehensive auditing and session recording guardrails.
• Perform routine maintenance, advanced troubleshooting, and performance tuning for PSM components, Session Managers, and HTML5 Gateways.
3. Capacity Planning & Architecture
• Conduct comprehensive assessments of current and projected PSM capacity requirements, analyzing concurrent user loads, recording storage metrics, and network bandwidth.
• Design highly available (HA), resilient, and scalable PSM architectures across distributed enterprise and cloud/hybrid infrastructures.
• Partner with enterprise architecture and compliance teams to formulate guidelines for session isolation, credential safeguarding, and disaster recovery.
REQUIRED QUALIFICATIONS
• Experience: 4+ years of hands-on CyberArk implementation and administration, with deep expertise in PSM architecture.
• Automation Stack: Proven skill in writing web connectors utilizing Selenium, C#, PowerShell, Python, or JavaScript.
• Thick Client Mastery: Extensive experience publishing and securing non-standard thick clients.
• Core PAM: Deep familiarity with CyberArk Vault, PVWA, CPM, PSM, and HTML5 Gateway.
• Infrastructure: Strong grasp of Windows Server, Active Directory, GPO, load balancing, and network routing.
PREFERRED QUALIFICATIONS
• Certifications: CyberArk Certified Delivery Engineer (CCDE) or CyberArk Certified Trustee.
• Factory Frameworks: Demonstrated experience implementing a ''''Connector Factory'''' or self-service intake framework.
• Cloud / Modern Ops: Exposure to containerized environments (Docker/K8s) or cloud-hosted PAM components (AWS/Azure).
• Analytical Mindset: Advanced capability in troubleshooting complex DOM structures and session anomalie