Lead PAM Cybersecurity Engineer

• Lead the design, architecture, and implementation of the CyberArk Privileged Access Management (PAM) solution across the enterprise.

• Oversee the full lifecycle of CyberArk deployment, including planning, integration, configuration, and scaling of the solution.

• Lead efforts to integrate CyberArk with other security tools (SIEM, IAM, and security monitoring systems) for comprehensive access control and auditing.

• Define and implement best practices for managing privileged accounts, session recording, and auditing.

The salary range for this position is $125,000 - $145,000 USD, which is dependent on a several factors including relevant experience, geography, business needs and market demand. This role may offer the following benefits: medical, vision, and dental insurance; life insurance; disability insurance; a 401(k)-matching program; among other employee benefits. This role may also be eligible for short-term or long-term incentive compensation, including, but not limited to, cash bonuses. This role includes paid Personal Time Off and paid company holidays.

• CyberArk Expansion & Scaling:

• Take full responsibility for the ongoing expansion and scalability of the CyberArk platform to accommodate growing needs within the organization.

• Assess new business requirements and scale CyberArk to meet the security needs of additional systems, applications, and environments.

• Oversee the integration of new systems and applications into CyberArk for centralized privileged account management.

• Privileged Access Management Strategy:

• Develop and implement a comprehensive strategy for managing privileged accounts, including password rotation, vaulting, and access request processes.

• Define and enforce access policies that ensure least-privilege access and reduce security risks associated with privileged accounts.

• Ensure compliance with security standards and industry regulations, including those related to PAM.

• CyberArk Administration & Optimization:

• Perform advanced administration and configuration of CyberArk, including the management of Digital Vaults, Safe configurations, and privileged session management.

• Troubleshoot complex CyberArk-related issues, ensuring minimal disruption to the business and ensuring seamless access to privileged accounts.

• Continuously optimize the CyberArk environment for performance, scalability, and security.

• Lead the effort to patch, upgrade, and maintain the CyberArk solution, ensuring it is up to date with the latest security enhancements.

• CyberArk Security and Compliance Oversight:

• Ensure CyberArk is fully aligned with regulatory compliance requirements, including SOX, HIPAA, GDPR, and NIST.

• Conduct regular audits of privileged access and associated logs, ensuring that all access is fully tracked and monitored.

• Lead efforts to detect, investigate, and respond to any suspicious activity related to privileged access.

• Leadership & Stakeholder Management:

• Act as the subject matter expert (SME) for CyberArk and privileged access management across the organization.

• Collaborate with senior leadership to align CyberArk strategy with the overall security roadmap and business objectives.

• Provide leadership in defining CyberArk-related policies and procedures, ensuring alignment with best practices.

• Engage with internal and external stakeholders, including IT, security, compliance, and audit teams, to ensure seamless integration of CyberArk and ensure that business requirements are met.

• CyberArk Incident Response & Troubleshooting:

• Take ownership of any CyberArk-related incidents and provide quick resolutions to minimize business disruptions.

• Lead incident response activities related to privileged access, ensuring thorough investigation, documentation, and root cause analysis.

• Manage post-incident reviews, identifying lessons learned and implementing process improvements to prevent recurrence.

• Reporting & Documentation:

• Develop and maintain comprehensive reports and dashboards to track CyberArk performance, usage, and compliance.

• Document CyberArk configurations, policies, and procedures to ensure clear and consistent management.

• Provide reports to senior management on privileged access activities, incidents, and compliance status.

• Continuous Improvement & Innovation:

• Stay abreast of the latest advancements in privileged access management, CyberArk features, and security best practices.

• Proactively identify opportunities for process improvements and automation within the CyberArk platform.

• Evaluate new features and capabilities within CyberArk to continuously improve the effectiveness and security of privileged access management.

EDUCATION and/or EXPERIENCE and QUALIFICATIONS:

• Bachelor’s degree in Computer Science, Information Security, or a related field, or equivalent work experience.

• 7+ years of experience in Privileged Access Management (PAM), with 3+ years of hands-on experience in implementing and managing CyberArk in large, complex environments.

• Strong expertise in CyberArk administration, architecture, and configuration.

• Deep understanding of privileged access management principles, including least-privilege access, password management, session recording, and auditing.

• Experience with integrating CyberArk with other security tools (SIEM, IAM, etc.) and enterprise systems.

• Proven track record of building, scaling, and optimizing CyberArk solutions to meet enterprise-level security needs.

• Knowledge of regulatory compliance standards such as SOX, GDPR, HIPAA, and NIST, and how they relate to privileged access management.

• Strong troubleshooting, problem-solving, and analytical skills.

• Experience with scripting (e.g., PowerShell, Python) to automate CyberArk management tasks is a plus.

• Excellent communication skills with the ability to collaborate effectively with cross-functional teams and present technical information to non-technical stakeholders.

• Experience leading security projects or initiatives, with a focus on privileged access management and CyberArk.