Senior CyberArk PAM Engineer

Senior Cyber Ark PAM Engineer

Experience Required
: 8-10 Years

Location
:
Brampton - Hybrid (2-3 days from Office)

Technical Skills
: 3 to 6 years of hands-on experience with Cyber Ark. Privileged Access Security solutions. Strong understanding of Privileged account management Identity and Access Management (IAM) principles Secrets management Session monitoring and credential rotation.

Experience with Windows Linux OS Active Directory Networking concepts (SSH, RDP, TLS)
Database password management Handson scripting experience using Power Shell Bash Python (preferred)

Role

Description:

1.Design & Implementation

Deploy, configure, and maintain core Cyber Ark Privileged Access Security (PAS) components, including:

PVWA (Password Vault Web Access)

PAIM / PSM (Privileged Session Manager)

PIM / PAM Vault

AIM / CCP (Application Identity Manager / Central Credential Provider)

CPM (Central Policy Manager)

Onboard privileged accounts, safes, platforms, and associated access policies.

Develop and customize Cyber Ark plugins, password rotation policies, and platform configurations.

2. Account & System Integration

Integrate Cyber Ark with enterprise systems, including:

Windows & Linux servers

Databases (Oracle, SQL)

Network devices

Cloud platforms (AWS, Azure, GCP)

Authentication systems (LDAP, Active Directory, MFA)

Configure PSM connectors, dual‑control workflows, and session‑recording capabilities.

3. Operations & Support

Troubleshoot vault access issues, CPM failures, session connection problems, and plugin errors.

Support break‑glass procedures, incident response, and vulnerability remediation tasks.

Monitor Cyber Ark component health, performance, logs, and audit activity to ensure system stability.

4. Security, Governance & Compliance

Enforce privileged access policies, credential rotation standards, and password complexity requirements.

Support internal and external audits by providing evidence, reports, and configuration documentation.

Implement PAM controls that support least‑privilege and zero‑trust security models.

5. Documentation & Collaboration

Develop and maintain runbooks, architecture diagrams, configuration guides, and SOPs.

Collaborate with Security, Dev Ops, Infrastructure, Application, and IAM teams to onboard new systems and ensure secure design.