PAM Engineer

• Administer CyberArk configuration changes, application updates, and routine platform maintenance activities
• Monitor the health, availability, and performance of the CyberArk PAM environment
• Troubleshoot CyberArk-related incidents, identify root causes, and coordinate escalations where necessary
• Monitor and respond to CyberArk logs, alerts, and security events
• Manage privileged account onboarding, password management policies, and access configurations
• Work with CyberArk Digital Vault, PVWA, CPM, PSM, and PSMP components
• Support CyberArk and Active Directory integration
• Coordinate patch management, platform upgrades, certificate renewals, and maintenance activities
• Collaborate with IAM Operations to manage privileged account provisioning and resolve access-related issues
• Respond to IAM team member and end-user queries regarding privileged access and platform functionality
• Analyse logs and investigate alerts to identify potential security issues or operational failures
• Validate service requests against approved runbooks and standard operating procedures
• Record completed activities, configuration changes, and incident resolutions in ServiceNow
• Develop and maintain technical documentation, system configuration records, troubleshooting guides, and operational runbooks
• Ensure activities comply with SLAs, security policies, audit requirements, and client operational standards
• Identify opportunities to improve platform stability, operational efficiency, and privileged access security

• 7+ years of hands-on experience administering and supporting CyberArk Privileged Access Management solutions
• In-depth knowledge of CyberArk components, including Vault, PVWA, CPM, PSM, and PSMP
• Strong experience with privileged account onboarding, password management, access controls, and policy configuration
• Practical experience troubleshooting CyberArk incidents and resolving platform-related issues
• Good understanding of Active Directory integration and enterprise identity management
• Experience analysing logs, investigating security alerts, and supporting incident response in PAM environments
• Familiarity with patch management, certificate renewals, platform upgrades, and routine maintenance
• Experience using IT service management tools such as ServiceNow and following documented operational procedures
• Strong documentation, analytical, troubleshooting, and problem-solving skills
• Ability to work effectively with IAM Operations, security teams, and end users in a managed services environment
• Strong understanding of security best practices, compliance requirements, and privileged access governance
• CyberArk Trustee, Defender, or Sentry certifications are preferred; Guardian or Luminary-level certifications are an advantage
• Experience integrating CyberArk with SIEM platforms and exposure to cloud PAM environments such as AWS or Azure are desirable
• CompTIA Security+ or CISSP certification would be an added advantage