CyberArk Secret Management Engineer

Job Description:

We are seeking a experienced CyberArk Engineer with strong expertise in CyberArk Secret Management (SaaS and self-hosted) mainly SaaS. The role involves designing, implementing, and optimizing enterprise-grade secret management solutions for clients.

Job Description

Key Responsibilities:

• Design and implement CyberArk Secret Management solutions, including:
  • CyberArk SaaS-based Secret Management
  • Self-hosted solutions such as AAM / CCP
• Lead end-to-end deployment and integration of:
  • Central Credential Provider (CCP)
  • Application Access Manager (AAM)
  • SaaS-based secrets management for cloud-native and modern applications
• Integrate CyberArk with:
  • Enterprise applications (on-premises and cloud)
  • DevOps pipelines (CI/CD)
  • Containerized and microservices environments
• Define and enforce secrets lifecycle management (storage, rotation, access control, auditing)
• Provide technical design, architecture guidance, and best practices
• Perform advanced troubleshooting and optimization
• Ensure compliance with audit, regulatory, and security standards

Required Skills & Experience:

• Strong hands-on experience with:
  • CyberArk Secret Management (SaaS solutions)
  • CyberArk AAM / CCP (self-hosted Secret Management)
• Mandatory:
  • Hands-on experience in designing and building at least 1 CyberArk Secret Management (SaaS) deployments within the past 1 year
  • CyberArk certifications (Defender, Sentry, CDE, Guardian)
• Proven experience in:
  • End-to-end CyberArk solution design and implementation
• Deep understanding of:
  • Secrets management architecture and best practices
  • Secure application authentication (API, tokens, certificates)
  • IAM and least privilege principles
• Experience integrating CyberArk with:
  • Applications and middleware
  • DevOps tools (e.g., Jenkins, Ansible, Kubernetes, etc.)
• Strong knowledge of:
  • Windows and Linux platforms
  • Networking and enterprise security fundamentals
• Ability to work independently and lead technical delivery

Good to Have:

• CyberArk PAM (SaaS and Self-Hosted) knowledge (Vault, PVWA, CPM, PSM)
• Experience in CyberArk upgrades or migrations
• Exposure to cloud platforms (Azure, AWS, GCP)
• Scripting skills (PowerShell, Python, REST API)

Key Requirements:

• Senior-level engineer with recent and proven SaaS Secret Management delivery experience
• Able to work independently with minimal supervision
• Strong stakeholder communication and solutioning capability

At DXC Technology, we believe strong connections and community are key to our success. Our work model prioritizes in-person collaboration while offering flexibility to support wellbeing, productivity, individual work styles, and life circumstances. We’re committed to fostering an inclusive environment where everyone can thrive.

Recruitment fraud is a scheme in which fictitious job opportunities are offered to job seekers typically through online services, such as false websites, or through unsolicited emails claiming to be from the company. These emails may request recipients to provide personal information or to make payments as part of their illegitimate recruiting process. DXC does not make offers of employment via social media networks and DXC never asks for any money or payments from applicants at any point in the recruitment process, nor ask a job seeker to purchase IT or other equipment on our behalf. More information on employment scams is available here .