Privileged Access Management Engineer

Privileged Access Management Engineer

Mizuho's Identity and Access Management (IAM) team is undergoing an exciting transformation. We're building a dedicated high performing IAM function that is central to the firm's cybersecurity and regulatory strategy. Our environment is dynamic, growing, and rich with opportunity. You'll work alongside a talented group of professionals who are passionate about solving complex access challenges, automating at scale, and strengthening security posture across both on-premises and cloud environments.

This is a unique chance to join our team that's shaping the future of IAM at a major financial institution.

We are seeking a Cyber Ark Engineer to support the implementation, operation, and ongoing management of our Privileged Access Management (PAM) platform. The role is responsible for securing privileged and service accounts, ensuring compliance with security standards, and supporting enterprise users and applications.

This hands-on engineering role focuses on delivering secure and scalable solutions for managing privileged accounts used by servers, applications, services, APIs, and cloud workloads. The ideal candidate has deep expertise in Cyber Ark and related technologies.

This role is critical to strengthening the firm's identity security posture, enabling secure cloud adoption, and supporting compliance with regulatory and internal control requirements

• Design, implement, and maintain Cyber Ark Privileged Access Management (PAM) solutions to secure privileged, service, and application accounts across enterprise environments.
• Configure and manage Cyber Ark components including Digital Vault, PVWA, CPM, PSM, and connectors (Windows, Unix, Database, Cloud where applicable).
• Create and manage safes, platforms, access policies, and permissions in accordance with least‑privilege and security standards.
• Build automations to support the core PAM activities.

• Lead onboarding of privileged and service accounts into Cyber Ark, including inventory validation, account vaulting, and enabling password rotation.
• Work closely with infrastructure and application teams to identify dependencies and ensure password changes do not disrupt services.
• Manage account lifecycle activities such as modifications, offboarding, and exception handling.

• Implement and monitor automated password rotation and reconciliation for managed accounts.
• Configure and support Privileged Session Management (PSM) for secure access and session recording.
• Troubleshoot password rotation failures, access issues, and CPM/PSM errors.

• Provide L2/L3 operational support, including root‑cause analysis and coordination with vendors or internal teams.
• Maintain and update runbooks, SOPs, and operational documentation for Cyber Ark processes.

• Support audit and regulatory requirements by generating Cyber Ark reports, access certifications, and compliance evidence.
• Participate in periodic privileged access recertifications and remediation of findings.
• Ensure Cyber Ark configurations align with IAM standards, internal policies, and regulatory frameworks (e.g., SOX, ISO, internal audits).

• Integrate Cyber Ark with IAM tools (e.g., SailPoint), Active Directory, Service Now and other enterprise applications.
• Support use of Cyber Ark REST APIs and Central Credential Provider (CCP) for application integrations and automation.
• Assist with automation and reconciliation processes related to privileged account discovery and onboarding.

• Act as a subject‑matter expert (SME) for Cyber Ark/PAM, advising application, infrastructure, and security teams.
• Coordinate with IAM Governance, Risk, Compliance, and Audit teams on PAM‑related initiatives.
• Participate in design and architecture discussions to identify gaps and drive scalable, automation-friendly improvements.

• Experience with cloud PAM (AWS, Azure, GCP)
• Scripting (Power Shell, Python) for automation
• Cyber Ark certifications (CPC, CDE, Defender)

• 7+ years of experience in Identity & Access Management, cybersecurity engineering, or related infrastructure security roles, with a strong focus on Privileged Access Management.
• Demonstrated experience with Cyber Ark.
• Experience in enterprise…