PAM/CyberArk Engineer

PAM/CyberArk EngineerLocation: Chandler, New York, Dallas, San Francisco, Charlotte, Raleigh, Minneapolis, ColumbusJob OverviewThey are seeking a hands-on Information Security Engineer with strong expertise in Identity and Access Management (IAM) and CyberArk Privileged Access Management (PAM). This role is part of the production support team, responsible for managing and supporting critical enterprise security applications, ensuring high availability, and responding to incidents in a fast-paced environment.Key ResponsibilitiesProvide production support for CyberArk and IAM platformsPerform onboarding, provisioning, and de-provisioning of privileged accountsManage CyberArk components, including troubleshooting, upgrades, and integrationsSupport privileged access lifecycle processesHandle incident management and resolve production issues (user access, password rotation, system outages)Manage change requests through full lifecycle (analysis → implementation → validation)Work with ServiceNow for ticketing and SLA managementDevelop and maintain automation scripts (PowerShell, Python, REST APIs)Support additional internal applications such as:Automated Password Reset PortalEnterprise Break Glass (Windows)Participate in on-call rotation to support critical systemsCollaborate with global teams (US & offshore)Required Qualifications5 years of experience in:Information SecurityIdentity & Access Management (IAM)Strong hands-on experience with CyberArk (mandatory):Installation, configuration, and upgradesTroubleshooting production issuesAccount onboarding (privileged accounts)Experience in privileged access management (PAM) platformsSolid understanding of:IAM conceptsAccess lifecycle (provisioning, deprovisioning)Security controls and complianceExperience supporting operational environments with SLAsScripting experience:PowerShellPythonREST APIsPreferred QualificationsExperience with:Active Directory (AD)Federation tools (e.g., Ping, Okta)Familiarity with automation in IAM/PAM environmentsExperience with enterprise-scale security systemsOn-Call RequirementParticipation in on-call rotation every 4–6 weeksOn-call window: 7:00 AM – 7:00 PM (Central/Eastern)Coverage includes weekdays and weekends during rotationMust respond to alerts/emails within 15–20 minutesSupport highly critical, enterprise-level applications