IAM Engineer

Employment Type: Not provided

What You’ll Do: Implement, administer, maintain, and troubleshoot enterprise CyberArk PAM solutions across cloud and infrastructure environments. Onboard privileged and service accounts, manage credentials and password rotation, and support interactive, non-interactive, and API-based access. Configure and support CyberArk technologies, including EPV, PVWA, CPM, PSM, PSMP, PTA, HTML5 Gateway, CCP, and Credential Provider. Build application integrations and custom CPM plugins to expand and strengthen PAM capabilities. Integrate PAM solutions with SailPoint, databases, SCIM, AWS, GCP, Azure, and other enterprise and security platforms. Monitor system health and security metrics, resolve support issues, and contribute to IAM/PAM policies, controls, documentation, and security practices.

Job Requirements: 3–5+ years of hands-on CyberArk/PAM experience, including enterprise implementations and cloud-based PAM environments. Experience installing, configuring, upgrading, operating, and troubleshooting CyberArk components such as PVWA, CPM, PSM, PSMP, EPV, and application access technologies. 3+ years of enterprise PAM implementation experience and 3+ years of systems engineering experience in a medium-to-large financial services environment. Experience with SailPoint or another identity governance and administration (IGA) platform, including integrations with cloud platforms, databases, SCIM, or other enterprise systems.

Preferred Qualifications: CyberArk Defender and Sentry certifications are preferred. Security certifications such as CISSP, SSCP, CISM, GSEC, or Security+ are also valued. 100% paid medical, dental, and vision premiums for eligible employees and qualifying dependents 50% 401(k) match, up to the IRS maximum 20 days of PTO plus 10 paid holidays Paid primary caregiver leave and additional family-support benefits