Senior CyberArk Implementation Engineer

Requirements

We are seeking a Senior CyberArk Implementation Engineer with extensive experience in CyberArk Core PAS implementation, privileged account and application onboarding, platform integrations, automation, and custom plugin development.

Key Responsibilities

• Lead the architecture, design, implementation, and enhancement of CyberArk Core PAS solutions.
  
• Drive large-scale onboarding of privileged, service, application, database, cloud, and infrastructure accounts.
  
• Design and develop custom CPM plugins, password management processes, reconciliation workflows, and platform configurations.
  
• Develop and maintain custom PSM connectors and session-management integrations.
  
• Lead complex application onboarding covering discovery, account classification, Safe design, access models, password rotation, dependency mapping, testing, and operational handover.
  
• Develop API-driven automation using CyberArk REST APIs, PowerShell, Python, and Shell scripting.
  
• Troubleshoot complex CyberArk issues and perform advanced L3/L4 troubleshooting, log analysis, and root-cause analysis across Vault, CPM, PSM, PTA, CCP, and application integrations.
  
• Implement privileged access governance, password management policies, session recording, approval workflows, and PAM security controls.
  
• Support installation, upgrades, migrations, patching, performance tuning, hardening, high availability, and disaster recovery activities.
  
• Conduct capacity planning, health monitoring, and operational optimization of CyberArk environments.
  
• Collaborate with Infrastructure, Application, Security, IAM, Cloud, and Management teams on complex enterprise onboarding initiatives.
  
• Provide technical leadership and SME support for PAM transformation and enterprise onboarding programs.
  
• Create and maintain implementation standards, SOPs, runbooks, knowledge articles, technical documentation, and operational support guides.
  

Must-Have Skills

• 7–9 years of PAM experience with strong hands-on CyberArk implementation and engineering expertise.
  
• Strong experience with CyberArk Core PAS / Self-Hosted and/or Privilege Cloud.
  
• Hands-on experience with EPV, PVWA, CPM, PSM, PTA, CCP, and Credential Providers.
  
• Extensive experience onboarding privileged, service, application, database, cloud, and infrastructure accounts.
  
• Strong expertise in application onboarding, Safe design, account discovery, credential dependency analysis, password rotation, reconciliation, and session management.
  
• Expertise in developing and troubleshooting custom CPM plugins and reconciliation processes.
  
• Hands-on experience with custom PSM connectors and session-management integrations.
  
• Strong scripting and automation experience using REST APIs, PowerShell, Python, and Shell scripting.
  
• Experience integrating CyberArk with AD/LDAP, Entra ID/Azure AD, MFA, SIEM, ITSM, IGA, SMTP, and cloud platforms.
  
• Advanced troubleshooting across Vault, CPM, PSM, PTA, CCP, and CyberArk integrations.
  
• Experience with installation, upgrades, migrations, patching, performance tuning, HA, DR, and platform hardening.
  
• Experience implementing CyberArk AAM and enterprise secrets management.
  
• Strong understanding of service account governance, credential rotation, reconciliation, and privileged access controls.
  
• Experience integrating CyberArk with Jenkins, GitLab, GitHub Actions, Terraform, Ansible, and Azure DevOps.
  
• Experience implementing JIT access, privileged session monitoring, and advanced PAM security controls.
  

Good-to-Have Skills / Certifications

• CyberArk Defender
  
• CyberArk Sentry
  
• CDE PAM
  
• CDE CPC
  
• CDE EPM
  
• CISSP
  
• PMP
  
• Exposure to other cybersecurity domains
  

Benefits