Lead PAM Cybersecurity Engineer
About The Position
The Lead PAM Cybersecurity Engineer leads the design, architecture, implementation, and ongoing expansion of the enterprise CyberArk Privileged Access Management solution. The role oversees the CyberArk deployment lifecycle, integrates the platform with security tools and enterprise systems, and establishes best practices for privileged accounts, session recording, and auditing. The position develops the strategy and policies for privileged access management, administers and optimizes CyberArk, and ensures the platform meets security and regulatory compliance needs. It also serves as the organization’s CyberArk subject matter expert, leads incident response and troubleshooting for privileged-access issues, and provides reporting, documentation, and continuous improvement of the platform. The salary range is $125,000–$145,000 USD, depending on factors including relevant experience, geography, business needs, and market demand. The role may offer medical, vision, and dental insurance; life and disability insurance; a 401(k)-matching program; other employee benefits; and eligibility for short- or long-term incentive compensation, including cash bonuses. Paid personal time off and paid company holidays are included.
Requirements
- Bachelor’s degree in Computer Science, Information Security, or a related field, or equivalent work experience.
- At least 7 years of experience in Privileged Access Management (PAM).
- At least 3 years of hands-on experience implementing and managing CyberArk in large, complex environments.
- Strong expertise in CyberArk administration, architecture, and configuration.
- Deep understanding of PAM principles, including least-privilege access, password management, session recording, and auditing.
- Experience integrating CyberArk with security tools such as SIEM and IAM and with enterprise systems.
- Demonstrated ability to build, scale, and optimize CyberArk solutions for enterprise security needs.
- Knowledge of SOX, GDPR, HIPAA, and NIST compliance standards and their relevance to PAM.
- Strong troubleshooting, problem-solving, and analytical skills.
- Excellent communication skills and ability to collaborate across teams and present technical information to non-technical stakeholders.
- Experience leading security projects or initiatives focused on PAM and CyberArk.
Nice To Haves
- Experience with scripting, such as PowerShell or Python, to automate CyberArk management tasks.
Responsibilities
- Lead the design, architecture, and implementation of the enterprise CyberArk PAM solution.
- Oversee CyberArk deployment planning, integration, configuration, and scaling.
- Integrate CyberArk with SIEM, IAM, security monitoring tools, and enterprise systems.
- Define best practices for privileged-account management, session recording, and auditing.
- Expand and scale CyberArk to support additional systems, applications, and environments; assess new business requirements and integrate new systems for centralized privileged-account management.
- Develop and implement privileged-access strategies covering password rotation, vaulting, and access requests; define and enforce least-privilege access policies.
- Ensure compliance with security standards and industry regulations related to PAM.
- Administer and configure CyberArk, including Digital Vaults, Safes, and privileged session management.
- Troubleshoot complex CyberArk issues, minimize business disruption, and maintain seamless privileged-account access.
- Optimize the CyberArk environment for performance, scalability, and security; lead patching, upgrades, and maintenance.
- Align CyberArk with SOX, HIPAA, GDPR, and NIST requirements; audit privileged access and logs, and lead detection, investigation, and response to suspicious activity.
- Serve as the CyberArk and PAM subject matter expert; align strategy with senior leadership and the security roadmap, and define policies and procedures.
- Engage IT, security, compliance, audit, and other stakeholders to support integration and business requirements.
- Own CyberArk-related incidents, lead privileged-access incident response and investigation, document root causes, and conduct post-incident reviews and process improvements.
- Develop and maintain reports and dashboards on CyberArk performance, usage, and compliance; document configurations, policies, and procedures; report on privileged-access activities, incidents, and compliance to senior management.
- Stay current on PAM developments, CyberArk features, and security best practices; identify process-improvement and automation opportunities and evaluate new CyberArk capabilities.
Benefits
- Medical insurance
- Vision insurance
- Dental insurance
- Life insurance
- Disability insurance
- 401(k)-matching program
- Short-term or long-term incentive compensation, potentially including cash bonuses
- Paid personal time off
- Paid company holidays
- Other employee benefits
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
