IAM Systems Administrator - CyberArk PAM

Description

The IAM Systems Administrator - CyberArk Privilege Cloud is responsible for the administration, support, and ongoing optimization of the CyberArk Privileged Access Management (PAM) platform. This role focuses on securing privileged credentials, secrets, and session activity across hybrid environments (cloud and on-premises), while enabling least-privilege access, Zero Standing Privileges (ZSP), and Just-in-Time (JIT) access models.

This position works closely with security, infrastructure, and compliance teams to support key security initiatives, enforce access policies, and maintain the operational resilience of PAM services in alignment with Zero Trust Architecture principles.

Requirements

Key Responsibilities

• Operate and maintain CyberArk Privilege Cloud environments.
• Onboard and manage privileged accounts, secrets, safes, and credentials using:
• PVWA (Password Vault Web Access)
• PSM (Privileged Session Manager)
• CPM (Central Policy Manager)
• Troubleshoot issues related to safes, privileged accounts, password rotation, and policy enforcement.
• Ensure healthy integration of CyberArk with platforms including Windows, Linux, databases, applications, and cloud services (AWS, Azure, Google Cloud Platform).
• Monitor the health and performance of CyberArk components.
• Configure and enforce security policies for privileged access at safe and platform levels.
• Manage integrations with SIEM, ITSM, and other enterprise tools.
• Collaborate with internal teams to meet regulatory and governance requirements.
• Create and maintain documentation for PAM operations, procedures, and configurations.
• Support audits by providing logs, access reports, and evidence of controls.

Required Qualifications

• Minimum 2 years of hands-on experience with CyberArk PAM.
• Associate degree or equivalent experience.
• CyberArk certification.
• Experience onboarding and configuring accounts, safes, and policies.
• Strong understanding of IAM, PAM, and Zero Trust principles.
• Familiarity with CyberArk components: Vault, PVWA, PSM, CPM (Conjur is a plus).
• Solid knowledge of Active Directory, LDAP, and RBAC models.
• Excellent problem-solving and communication skills.

Preferred Qualifications

• Bachelor's degree in Information Security, Computer Science, Information Systems, or related field.
• Experience with:
• CyberArk Endpoint Privilege Management (EPM)
• CyberArk Workforce Password Manager (WPM)
• Cloud platforms (AWS IAM, Azure AD, etc.)
• SailPoint IIQ or ISC
• CyberArk automation workflows
• Scripting languages (PowerShell, Python)
• Professional security certifications (e.g., CISSP, CISM, CISA).
• Knowledge of compliance frameworks (HIPAA, PCI-DSS, SOX).
• Experience responding to security incidents and conducting root cause analysis for PAM-related events.

MTools & Technologies

• CyberArk: PVWA, CPM, PSM, PTA
• Operating Systems: Windows, Linux
• SIEM Platforms: Splunk, QRadar
• Cloud Platforms: AWS, Azure, Google Cloud Platform
• Scripting: PowerShell, Python, REST APIs

iSkills & Attributes

• Self-motivated and detail-oriented with strong written and verbal communication skills.
• Ability to document technical processes and procedures clearly and accurately.
• High level of initiative and ability to work independently.
• Strong personal integrity and professionalism in handling confidential information.

Technology Doesn't Change the World, People Do.

Robert Half is the world's first and largest specialized talent solutions firm that connects highly qualified job seekers to opportunities at great companies. We offer contract, temporary and permanent placement solutions for finance and accounting, technology, marketing and creative, legal, and administrative and customer support roles.

Robert Half works to put you in the best position to succeed. We provide access to top jobs, competitive compensation and benefits, and free online training. Stay on top of every opportunity - whenever you choose - even on the go. Download the Robert Half app and get 1-tap apply, notifications of AI-matched jobs, and much more.

All applicants applying for U.S. job openings must be legally authorized to work in the United States. Benefits are available to contract/temporary professionals, including medical, vision, dental, and life and disability insurance. Hired contract/temporary professionals are also eligible to enroll in our company 401(k) plan. Visit roberthalf.gobenefits.net for more information.

2025 Robert Half. An Equal Opportunity Employer. M/F/Disability/Veterans. By clicking "Apply Now," you're agreeing to Robert Half's Terms of Use.