PAM (Privileged Access Management) Senior CyberArk Engineer

Santander•Boston, MA

1d•$101,250 - $180,000

About The Position

Santander is a global leader and innovator in the financial services industry and is evolving from a high-impact brand into a technology-driven organization. Our people are at the heart of this journey and together, we are driving a customer-centric transformation that values bold thinking, innovation, and the courage to challenge what’s possible. This is more than a strategic shift. It’s a chance for driven professionals to grow, learn, and make a real difference. If you are interested in exploring the possibilities We Want to Talk to You! The Senior CyberArk Engineer is responsible for architecting, deploying, and maintaining privileged access security solutions using the CyberArk suite. This role ensures the protection of critical systems, credentials, and privileged accounts while aligning with security best practices and regulatory requirements. The ideal candidate possesses deep hands-on expertise with CyberArk Privileged Access Security (PAS), strong security engineering skills, and experience operating in large, complex environments.

Requirements

Bachelor's Degree or equivalent work experience: Computer Science/Software Engineering or equivalent field.
5+ years of experience in Information Security or Identity and Access Management.
5+ years of hands-on on-premises CyberArk engineering experience.
Strong understanding of privileged access management principles.
Proficiency with: PowerShell, Python, or equivalent scripting languages. Windows and Linux administration. Active Directory, LDAP, MFA integrations. Networking basics (firewalls, proxies, DNS).
Experience supporting large-scale, high-availability PAM environments.
Threat and vulnerability management related to privileged access
Background in regulated industries (finance, healthcare, government).
Strong analytical, problem-solving, and debugging skills.
Excellent communication and documentation abilities.
Ability to lead complex projects with minimal supervision.
High attention to detail and commitment to security best practices.

Nice To Haves

CyberArk Defender, Sentry, or Guardian certifications.
Established work history or equivalent demonstrated through a combination of work experience, training, military service, or education.
Experience in Microsoft Office products.

Responsibilities

CyberArk Engineering & Administration: Design, deploy, configure, and maintain the full on-premises CyberArk Privileged Access Security (PAS) suite, including: Enterprise Password Vault (EPV) Privileged Session Manager (PSM) Privileged Session Manager for SSH (PSM-SSH) Central Policy Manager (CPM) Privileged Threat Analytics (PTA)
Implement and maintain CyberArk safes, platforms, policies, and connectors.
Integrate CyberArk with enterprise systems, including LDAP/AD, and SIEM ticketing systems, and cloud platforms (AWS, Azure, GCP).
Build and maintain custom connectors and plugins for applications and infrastructure.
Security Architecture & Governance: Develop and enforce privileged access policies and best practices.
Conduct threat modeling and ensure PAM alignment with regulatory frameworks (SOX, GLBA, NYDFS , etc.).
Review privileged access workflows and recommend improvements to strengthen security posture.
Automation & Continuous Improvement: Automate onboarding of privileged accounts, systems, and applications using REST APIs, PowerShell, Python, or similar tools.
Tune CPM/PSM performance, optimize vault operations, and improve automated credential rotation processes.
Implement continuous monitoring, alerting, and reporting mechanisms.
Operations & Support: Serve as a subject matter expert (SME) for CyberArk-related issues across infrastructure, development, and security teams.
Troubleshoot complex vaulting, credential, and session management issues.
Perform CyberArk upgrades, patching, health checks, and system hardening.
Participate in on-call rotations and provide escalation-level support.
Collaboration & Training: Work closely with IAM, security operations, risk, and compliance stakeholders.
Provide guidance and mentorship to junior engineers.
Develop documentation, runbooks, and best practice guides.

Benefits

We know rewards go beyond numbers. Offering more than just a paycheck our benefits are designed to support you, your family and your well-being, now and into the future.
Santander Benefits - 2025 Santander OnGoing/NH eGuide (foleon.com)

Stand Out From the Crowd

Upload your resume and get instant feedback on how well it matches this job.

Upload and Match Resume