CyberArk Engineer, PAM & Privileged Access
Overview
You will own the CyberArk privileged access management platform at enterprise scale, securing 3,000+ privileged accounts across production and non-production environments. You will report to the IAM Lead and collaborate with security operations and infrastructure teams on AD/LDAP integration and MFA enforcement. This 12+ month contract in Coppell, TX puts you at the center of a PAM modernization initiative, with direct impact on audit compliance and incident response.
What You'll Do8
- 1Design CyberArk EPV vault architectures for high availability and disaster recovery, configuring CPM policies for automated password rotation across 3,000+ accounts.
- 2Deploy and maintain PSM and PVWA portals to enable secure remote access and session isolation for internal and third-party users.
- 3Integrate CyberArk with Active Directory and LDAP for centralized user authentication, and enforce MFA via RADIUS or SAML across privileged sessions.
- 4Automate operational workflows with PowerShell scripts, including account discovery, reconciliation, and certificate lifecycle management.
- 5Deliver monthly privileged access reports to audit teams, demonstrating compliance with ISO 27001 and SOX through session recordings and access reviews.
- 6Collaborate with the SIEM team to forward CyberArk audit logs and alerts to Splunk, enabling real-time threat detection for privileged activity.
- 7Troubleshoot and resolve Password Safe and PRA issues within defined SLAs, driving root cause analysis for recurring incidents.
- 8Drive quarterly access recertification campaigns with business owners, ensuring least-privilege principles across all privileged accounts.
Requirements8
- 15+ years administering CyberArk EPV, CPM, PSM, PVWA, including Password Safe and PRA modules.
- 23+ years integrating PAM solutions with Active Directory and LDAP, with hands-on MFA implementation using RSA SecurID or Microsoft Authenticator.
- 32+ years scripting with PowerShell for automation of account maintenance, reporting, and API integrations.
- 41+ years working with ServiceNow for change management and incident tracking, and integrating CyberArk with Splunk or similar SIEM platforms.
- 5Experience with BeyondTrust privileged access solutions in hybrid environments, including cloud and on-premise deployments.
- 6Concrete understanding of privileged account governance, including password vaulting, session monitoring, and audit evidence collection.
- 7Effective communication with cross-functional teams for requirement gathering and solution design.
- 8CyberArk Defender or Sentinel certification preferred but not required.
Salary Insight
Salary not disclosed in listing
Location
Required Skills
Similar open positions
Explore active roles that match your skills and interests.
Swanktek Inc
VerifiedBeyond Trust / CyberArk Engineer
Lead design and implementation of Privileged Access Management solutions to secure privileged accounts and enforce access controls. Own end-to-end PAM lifecycle across hybrid environments. Drive adoption of CyberArk and Beyond Trust platforms. Collaborate with security teams to align PAM with organizational policies. Shape future PAM strategy through continuous improvement initiatives.
Modern Agile Technologies, LLC
VerifiedCyberArk Consultant, Identity & Access Management
You will own the design, installation, and configuration of CyberArk vaults, including DR in clustered architecture, for a self-hosted platform. You will join a small team focused on privileged access management, working onsite in Dallas 3-5 days per week. This contract role demands deep exposure to cluster vault and discovery process, with a focus on resolving password, permission, and access issues fast.
New York Technology Partners
VerifiedBeyondTrust Engineer | CyberArk Engineer
Lead design and implementation of Privileged Access Management solutions using CyberArk and BeyondTrust to secure privileged accounts and enforce access controls. Oversee deployment of CyberArk and BeyondTrust platforms across enterprise environments. Ensure compliance with security policies while scaling authentication frameworks. Drive continuous improvement of identity governance processes.
Motion Recruitment Partners, LLC
VerifiedCyberArk PAM Engineer Information Security Engineer 4
Design and implement secure authentication solutions using Python and AWS. Lead teams to scale identity management platforms. Drive security initiatives across hybrid environments. Own the architecture of Zero Trust frameworks. Shape the future of cloud security practices.
Cyberobotix
VerifiedCyberArk EPM Milpitas CA
Lead design deployment and fine tuning of CyberArk EPM application control policies for Windows-based endpoints. Develop and enforce application listing strategies to manage software execution and mitigate unauthorized usage. Collaborate with endpoint operations security engineering and automation teams to streamline policy rollout. This is a long term position where you will drive security outcomes.
ComTec Information Systems
VerifiedSenior IT Project Manager Privileged Access Management PAM
Lead planning and execution of large enterprise Privileged Access Management program managing schedules work plans resources budgets dependencies executive reporting. Differentiate by leading privileged access initiatives across multiple organizations.