PAM Engineer​/CyberArk

We are hiring PAM Lead - Temp to Hire in Tampa! W2 only, no visa sponsorship available.

The Privileged Access Management (PAM) Lead is responsible for leading, operating, and maturing clients Privileged Access Management (PAM) program using the Cyber Ark platform. This role serves as the primary Cyber Ark subject matter expert, ensuring effective privileged account lifecycle management, least privilege enforcement, privileged credential protection, and privileged access governance programs across both enterprise IT and Operational Technology (OT) environments.

This position works closely with IAM, Infrastructure, OT/SCADA Operations, Application Owners, Compliance, Risk, and Enterprise Architecture teams to enforce least privilege access, support regulatory requirements, and improve visibility into privileged and non-human access across the enterprise. The role is hands‑on within the Cyber Ark platform and executes designs aligned to enterprise security architecture standards and critical infrastructure security requirements.

• Serve as the enterprise lead and technical owner for the Cyber Ark PAM platform, providing hands‑on leadership and subject matter expertise.
• Design, implement, and maintain:
  • Privileged account onboarding and lifecycle management
  • Least privilege and privileged access governance models
  • Password vaulting, credential rotation, and session management capabilities
  • Privileged access review and attestation campaigns, including administrative, service, shared, and OT privileged account reviews
• Configure and manage Cyber Ark workflows and platform components, including:
  • Privileged Session Manager (PSM)
  • Privileged Vault
  • Endpoint Privilege Manager (EPM), where applicable
• Lead onboarding of systems and applications into Cyber Ark in coordination with IAM, Infrastructure, OT/SCADA teams, and application SMEs, including:
  • Privileged account discovery and onboarding
  • Credential management and reconciliation
  • Session management configuration
  • Privileged access review design
• Support privileged access security across enterprise and OT/ICS environments, including:
  • SCADA systems
  • Windows and Linux operational servers
  • Engineering workstations
  • Service and shared operational accounts
• Design and maintain Cyber Ark integration capabilities, including:
  • Microsoft Entra  (authentication, directory integration, SSO alignment)
  • Service Now request and approval workflows
  • Windows, Linux, databases, network devices, and enterprise applications
  • SAP and other enterprise or custom applications
• Implement and tune Cyber Ark security and governance controls, including:
  • Least privilege enforcement
  • Just‑in‑Time (JIT) privileged access
  • Shared and emergency access account governance
  • Privileged credential rotation and policy enforcement
• Partner with Cyber Security and OT teams to support secure privileged access strategies for critical infrastructure environments while minimizing operational disruption to plant and grid operations.
• Support SOX, NERC CIP, and audit evidence requests by providing privileged access reports, session logs, credential governance evidence, and PAM documentation.
• Leverage Cyber Ark analytics, reporting, and dashboards to improve visibility into privileged access risk, unmanaged privileged accounts, excessive standing access, and operational technology access exposure.
• Maintain operational documentation, runbooks, procedures, and support models for PAM.
• Drive continuous improvement of PAM maturity, reducing standing privileged access, improving credential security, and strengthening privileged access monitoring and accountability.

Key Internal:

• I AM Team, Infrastructure Teams, OT/SCADA Operations Teams, Application Owners, Enterprise Architecture, Compliance, Risk, Audit, Service Now Team.

Key External:

• Cyber Ark Professional Services, System Integrators, Auditors.

Required:

• From the list of certification vendors, one or more related Information Security or Identity certifications, or ability to obtain via self‑study within one year of hire date.

Preferred:

• Cyber Ark Defender or Sentry Certifications
• Microsoft Identity…