Cybersecurity Manager

Job Summary

We are seeking an experienced Senior Cyber Ark PAM Implementation Engineer to assess, optimize, and enhance our existing Cyber Ark Privileged Access Management environment. The ideal candidate will have strong hands-on experience with Cyber Ark Cloud/SaaS and the ability to perform a comprehensive assessment of the existing PAM implementation, identify security and operational gaps, and develop a strategic roadmap for utilizing Cyber Ark capabilities to their fullest extent.

This role requires deep expertise in Cyber Ark PAM and Endpoint Privilege Manager (EPM), Secure Infrastructure Access (SIA), Just-in-Time (JIT) privileged access, application onboarding, password rotation, privileged session access, secrets management, and cloud integrations. The successful candidate will define the current-state architecture, recommend a target-state design based on Cyber Ark and industry best practices, and lead or support execution of the resulting roadmap.

• Perform a comprehensive assessment of the existing Cyber Ark PAM environment.
• Review the current Cyber Ark architecture, configuration, integrations, policies, account onboarding processes, and operational procedures.
• Identify security gaps, implementation deficiencies, unused capabilities, technical debt, and opportunities for optimization.
• Evaluate the effectiveness of privileged account onboarding, password rotation, session management, access controls, and privileged access workflows.
• Assess Cyber Ark platform health, scalability, resilience, availability, and operational maturity.
• Review the existing use of Cyber Ark Cloud capabilities and recommend improvements.
• Develop a current-state assessment report, including findings, risks, recommendations, and remediation priorities.

• Develop a strategic PAM roadmap aligned with business requirements, cybersecurity objectives, and Cyber Ark best practices.
• Define a target-state Cyber Ark architecture and implementation plan.
• Develop a prioritized plan to maximize adoption and utilization of Cyber Ark capabilities.
• Create implementation phases, dependencies, milestones, and technical requirements.
• Define PAM use cases and prioritize systems, accounts, applications, and user populations for onboarding.
• Develop a PAM maturity improvement plan.

Implement and optimize Cyber Ark Cloud/SaaS capabilities, including:

• Privileged account management and onboarding
• Account discovery and lifecycle management
• Password rotation, verification, and reconciliation
• Privileged session management and recording
• Privileged session monitoring
• Application credential management
• Secrets management
• Privileged access request and approval workflows
• Cloud infrastructure privileged access
• Integration with enterprise identity and authentication platforms

• Design, implement, and optimize Cyber Ark Secure Infrastructure Access (SIA).
• Enable secure, centralized access to infrastructure while minimizing exposure of privileged credentials.
• Implement secure access workflows for Windows, Linux, cloud infrastructure, and other supported platforms.
• Integrate SIA with enterprise identity providers and authentication mechanisms.
• Implement role-based access controls for infrastructure access.
• Develop standards and procedures for onboarding infrastructure to SIA.
• Evaluate existing administrative access methods and identify opportunities to reduce direct credential exposure.

• Design and implement Just-in-Time (JIT) privileged access capabilities.
• Implement time-bound and controlled privileged access and reduce standing privileges where feasible.
• Integrate JIT workflows with identity, ITSM, cloud, and authentication platforms where appropriate.
• Define access request, approval, elevation, expiration, and revocation workflows.
• Develop controls for privileged access to cloud and infrastructure environments.
• Monitor and optimize JIT access policies based on operational and security requirements.

• Lead onboarding of applications, systems, databases, platforms, and privileged accounts into Cyber Ark.
• Assess applications for password rotation, credential management, and secure access requirements.
• Configure and implement password rotation, verification, and reconciliation.
• Onboard service accounts and application accounts into Cyber Ark.
• Work with application…