PAM Engineer

Overview

$$55
Accepts corp to corp applications

Skills

GCP
python
aws
Azure
REST APIs
Automation
Cloud Security
Active Directory
Privileged Access Management (PAM)
CyberArk Privileged Cloud
CrowdStrike Identity Protection
Identity Threat Detection
Just-in-Time (JIT) Access
Risk-Based Authentication
Access Governance
LDAP
SAML
OAuth
MFA
PowerShell Scripting
CyberArk API Integration
PSM
CPM
Network Security
TCP/IP
Firewalls
SIEM Integration
Zero Trust Security
Compliance (SOX
PCI-DSS
NIST)
Incident Response
Log Analysis
Tiering Model Implementation
IAM/PAM Administration
Security Audits
Risk Assessment
Access Policy Management
CISSP
CISM
Security+
Enterprise PAM Platforms

Job Details

Job Title: PAM Engineer
The ideal candidate will have hands-on experience with CyberArk Privileged Cloud and strong expertise in CrowdStrike Identity Protection. This role focuses on designing, implementing, and managing privileged access controls across a hybrid cloud environment to ensure compliance, minimize risk, and support zero trust security initiatives.

Key Responsibilities:

CyberArk Privileged Cloud Administration:

  • Administer and configure CyberArk Privileged Cloud, including user management, policy setup, account onboarding, and Safe configurations.

  • Gain deep familiarity with CyberArk's SaaS architecture and core components.

CrowdStrike Identity Protection:

  • Serve as a subject matter expert in CrowdStrike Identity Protection for identity threat detection and privileged access control.

  • Implement just-in-time (JIT) access and risk-based authentication models.

Troubleshooting and Support:

  • Act as a Tier 2 technical expert for privileged access issues.

  • Troubleshoot complex authentication problems (SAML, OAuth, MFA), network connectivity, and integration issues with PSM and CPM.

Automation and Integration:

  • Develop automation scripts using PowerShell and Python for account management and integration with CyberArk APIs.

  • Perform log analysis and incident response related to privileged access.

Security and Compliance:

  • Enforce privileged access best practices to meet compliance requirements (SOX, PCI-DSS, NIST).

  • Participate in audits, risk assessments, and the development of access governance frameworks.

Collaboration and Documentation:

  • Collaborate with infrastructure, application, and security teams to ensure consistent access control implementation.

  • Document access use cases and recommended solutions for administrative and Tier 2 systems.

Tiering Model Implementation:

  • Implement and manage a Tier 2 Tiering Access Model leveraging CrowdStrike Next Gen Identity.

  • Support privileged access discovery for Tier 2 assets such as workstations and AWS Workspaces.

Required Qualifications:

  • 6+ years of experience in cybersecurity or systems administration with a focus on PAM.

  • 3+ years of hands-on experience with CyberArk Privileged Cloud.

  • Proven experience managing and troubleshooting enterprise PAM platforms.

  • Strong understanding of Active Directory, LDAP, SAML, OAuth, and MFA.

  • Proficiency in PowerShell scripting; working knowledge of Python and REST APIs.

  • Strong networking fundamentals (TCP/IP, firewalls, cloud networking AWS/Azure/Google Cloud Platform).

  • Experience integrating PAM with enterprise systems and SIEM platforms.

Preferred Qualifications:

  • CyberArk Trustee or higher certification.

  • Relevant cloud platform certifications (AWS, Azure, or Google Cloud Platform).

  • Security certifications such as CISSP, CISM, or Security+.

  • Experience with hybrid cloud or enterprise-scale IAM/PAM implementations.


    Yeshwanth| Professional Recruiter
    | Mobile: EXT-125
    Linkedin:
Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.

About Cliff Services Inc