PAM Operations & Platform Specialist
We are looking for a skilled PAM Operations & Platform Specialist to oversee the day-to-day stability, administration, and expansion of our enterprise privileged security posture. In this hands-on engineering role, you will maintain and optimize our CyberArk / Idira Privilege Cloud infrastructure while bridging operational maintenance with the deployment of new architectural blueprints.
Beyond maintaining the core vault environment, you will drive technical implementations for adjacent privileged access products, including Workforce Password Management (WPM), Endpoint Privilege Management (EPM), and Vendor PAM, ensuring compliant, frictionless, and secure access across the organization.
Candidate Profile & Qualifications
Essential Technical Skills & Experience:
- 3–5 years of hands-on platform administration and operational support within CyberArk or Idira Privilege Cloud ecosystems.
- Deep operational fluency with core vault components: Central Policy Manager (CPM), Privileged Session Manager (PSM), safe design, session recording, and automated rotation logic.
- Proven experience standing up, debugging, and maintaining connector infrastructure across hybrid enterprise networks.
- Solid technical grounding in foundational infrastructure:
- Operating systems: Windows Server and Linux enterprise distributions.
- Directory and access services: Microsoft Active Directory, Microsoft Entra ID, Single Sign-On (SSO), and MFA integrations.
- Network fundamentals: Core routing, firewalls, certificates, and DNS resolution.
- Practical understanding of high-availability architectures, break-glass protocols, and disaster recovery procedures.
- Familiarity with ITIL frameworks, specifically Change, Incident, and Problem Management workflows.
Preferred & Differentiating Factors:
- Experience administering integrated modules across the platform portfolio (EPM, WPM, Vendor Privileged Access).
- Background working in GxP-regulated environments (e.g., Pharmaceuticals, Life Sciences, or Healthcare), with practical knowledge of computer systems validation (CSV), qualification standards, and strict audit trails.
- Practical scripting capabilities in PowerShell or Python to interact with PAM REST APIs for mass onboarding and configuration automation.
- Experience integrating PAM telemetry with enterprise SIEM solutions and ticketing systems (ServiceNow).
- Active vendor certifications (such as CyberArk Certified Defender, Sentry, or equivalent credentials).
