Lead PAM Engineer (CyberArk)

We are seeking a Lead PAM Engineer (CyberArk) to design, implement, and support enterprise Privileged Access Management (PAM) and Secrets Management solutions within a highly regulated environment. This role will lead the engineering, automation, and integration of privileged access technologies across hybrid infrastructure and cloud platforms, helping to protect critical systems and sensitive credentials.

The ideal candidate has deep expertise with CyberArk, Azure Key Vault, automation, and enterprise identity security. This individual will partner with infrastructure, cloud, DevOps, application, and cybersecurity teams to implement secure, scalable solutions while ensuring compliance with enterprise security standards and regulatory requirements.

Responsibilities

• Design, implement, and support enterprise Privileged Access Management (PAM) and Secrets Management solutions.
• Administer and enhance CyberArk, including credential vaulting, privileged session management, access policies, and credential lifecycle management.
• Implement and support Azure Key Vault for secure secrets, keys, and certificate management.
• Develop automation using PowerShell and REST APIs to streamline credential management and access workflows.
• Integrate PAM and secrets management into CI/CD pipelines and DevOps processes.
• Design secure PAM integrations across Windows, Linux, on-premises, and Azure cloud environments.
• Collaborate with infrastructure, cloud, application, and security teams to implement scalable security solutions.
• Ensure compliance with enterprise security standards, audit requirements, and least-privilege principles.

Qualifications

• Extensive experience engineering and supporting enterprise Privileged Access Management (PAM) solutions.
• Expert-level experience with CyberArk Privileged Access Management.
• Strong experience with Azure Key Vault and secrets management.
• Experience automating solutions using PowerShell and REST APIs.
• Experience integrating security solutions into CI/CD and DevOps environments.
• Strong knowledge of Active Directory, Microsoft Entra ID, Windows, Linux, and Azure.
• Excellent problem-solving, communication, and collaboration skills.

Technology Stack

• CyberArk Privileged Access Management (Required)
• Azure Key Vault
• PowerShell & REST API automation
• CI/CD & DevOps integration
• Active Directory / Microsoft Entra ID
• Windows & Linux
• GitLab
• Ansible
• CyberArk CDE (Preferred)