Lead PAM Cybersecurity Engineer

• Lead the design, architecture, and implementation of the CyberArk Privileged Access Management (PAM) solution across the enterprise. 

• Oversee the full lifecycle of CyberArk deployment, including planning, integration, configuration, and scaling of the solution. 

• Lead efforts to integrate CyberArk with other security tools (SIEM, IAM, and security monitoring systems) for comprehensive access control and auditing. 

• Define and implement best practices for managing privileged accounts, session recording, and auditing. 

The salary range for this position is $125,000 - $145,000 USD, which is dependent on a several factors including relevant experience, geography, business needs and market demand. This role may offer the following benefits: medical, vision, and dental insurance; life insurance; disability insurance; a 401(k)-matching program; among other employee benefits. This role may also be eligible for short-term or long-term incentive compensation, including, but not limited to, cash bonuses. This role includes paid Personal Time Off and paid company holidays.

• CyberArk Expansion & Scaling: 

• Take full responsibility for the ongoing expansion and scalability of the CyberArk platform to accommodate growing needs within the organization. 

• Assess new business requirements and scale CyberArk to meet the security needs of additional systems, applications, and environments. 

• Oversee the integration of new systems and applications into CyberArk for centralized privileged account management. 

• Privileged Access Management Strategy: 

• Develop and implement a comprehensive strategy for managing privileged accounts, including password rotation, vaulting, and access request processes. 

• Define and enforce access policies that ensure least-privilege access and reduce security risks associated with privileged accounts. 

• Ensure compliance with security standards and industry regulations, including those related to PAM. 

• CyberArk Administration & Optimization: 

• Perform advanced administration and configuration of CyberArk, including the management of Digital Vaults, Safe configurations, and privileged session management. 

• Troubleshoot complex CyberArk-related issues, ensuring minimal disruption to the business and ensuring seamless access to privileged accounts. 

• Continuously optimize the CyberArk environment for performance, scalability, and security. 

• Lead the effort to patch, upgrade, and maintain the CyberArk solution, ensuring it is up to date with the latest security enhancements. 

• CyberArk Security and Compliance Oversight: 

• Ensure CyberArk is fully aligned with regulatory compliance requirements, including SOX, HIPAA, GDPR, and NIST. 

• Conduct regular audits of privileged access and associated logs, ensuring that all access is fully tracked and monitored. 

• Lead efforts to detect, investigate, and respond to any suspicious activity related to privileged access. 

• Leadership & Stakeholder Management: 

• Act as the subject matter expert (SME) for CyberArk and privileged access management across the organization. 

• Collaborate with senior leadership to align CyberArk strategy with the overall security roadmap and business objectives. 

• Provide leadership in defining CyberArk-related policies and procedures, ensuring alignment with best practices. 

• Engage with internal and external stakeholders, including IT, security, compliance, and audit teams, to ensure seamless integration of CyberArk and ensure that business requirements are met. 

• CyberArk Incident Response & Troubleshooting: 

• Take ownership of any CyberArk-related incidents and provide quick resolutions to minimize business disruptions. 

• Lead incident response activities related to privileged access, ensuring thorough investigation, documentation, and root cause analysis. 

• Manage post-incident reviews, identifying lessons learned and implementing process improvements to prevent recurrence. 

• Reporting & Documentation: 

• Develop and maintain comprehensive reports and dashboards to track CyberArk performance, usage, and compliance. 

• Document CyberArk configurations, policies, and procedures to ensure clear and consistent management. 

• Provide reports to senior management on privileged access activities, incidents, and compliance status. 

• Continuous Improvement & Innovation: 

• Stay abreast of the latest advancements in privileged access management, CyberArk features, and security best practices. 

• Proactively identify opportunities for process improvements and automation within the CyberArk platform. 

• Evaluate new features and capabilities within CyberArk to continuously improve the effectiveness and security of privileged access management. 

EDUCATION and/or EXPERIENCE and QUALIFICATIONS:  

• Bachelor’s degree in Computer Science, Information Security, or a related field, or equivalent work experience. 

• 7+ years of experience in Privileged Access Management (PAM), with 3+ years of hands-on experience in implementing and managing CyberArk in large, complex environments. 

• Strong expertise in CyberArk administration, architecture, and configuration. 

• Deep understanding of privileged access management principles, including least-privilege access, password management, session recording, and auditing. 

• Experience with integrating CyberArk with other security tools (SIEM, IAM, etc.) and enterprise systems. 

• Proven track record of building, scaling, and optimizing CyberArk solutions to meet enterprise-level security needs. 

• Knowledge of regulatory compliance standards such as SOX, GDPR, HIPAA, and NIST, and how they relate to privileged access management. 

• Strong troubleshooting, problem-solving, and analytical skills. 

• Experience with scripting (e.g., PowerShell, Python) to automate CyberArk management tasks is a plus. 

• Excellent communication skills with the ability to collaborate effectively with cross-functional teams and present technical information to non-technical stakeholders. 

• Experience leading security projects or initiatives, with a focus on privileged access management and CyberArk.