RemoteLeaf Logo
Log in Sign up

Senior PAM Engineer - CyberArk (Remote in the US)

3 weeks, 6 days ago
United States
Full-time
Senior
Penetration Tester
Cybersecurity
Active Directory HashiCorp Vault HIPAA PowerShell Python REST API SIEM
Apply Now
GuidePoint Security

GuidePoint Security

GuidePoint Security is a trusted cybersecurity consulting firm that provides expertise, solutions, and services to help organizations make informed decisions and minimize risks. Their elite team of experts offers holistic perspectives on cybersecurity,...

Internet Software & Services
251-1K
Founded 2011
View All Jobs 39

Description

  • Lead end-to-end CyberArk implementations, upgrades, and migrations across on-prem, hybrid, and cloud environments.
  • Design and deploy core CyberArk components including Vault, CPM, PVWA, PSM, PSMP, and PTA.
  • Conduct discovery workshops with client stakeholders to define PAM strategy, requirements, and architecture.
  • Develop and execute onboarding plans for privileged accounts across Windows, Unix/Linux, databases, network devices, and cloud platforms.
  • Integrate CyberArk with SIEM, ITSM, IAM, ticketing tools, and Active Directory/LDAP using REST APIs and connectors.
  • Create platform configurations, custom connectors, and PSM plugins or recordings for non-standard target systems.
  • Produce solution designs, runbooks, architecture diagrams, and knowledge transfer documentation.
  • Manage project timelines, scope, and client communications across multiple concurrent engagements.
  • Troubleshoot complex production issues and provide escalation support.
  • Mentor junior engineers and contribute to internal methodology, accelerators, and best-practice playbooks.

Requirements

  • 5+ years of hands-on CyberArk experience, including at least 2+ years in a professional services, consulting, or systems integrator environment.
  • Experience leading or contributing to multiple full-lifecycle CyberArk implementations for different clients.
  • Deep technical knowledge of the CyberArk PAS suite, including Vault, CPM, PVWA, PSM, PSMP, and PTA/PTA-EPM.
  • Experience with platform onboarding across Windows, Unix/Linux, databases, network/security devices, and cloud IAM targets.
  • Strong scripting skills in PowerShell, Python, or similar languages for automation and custom integrations.
  • Familiarity with REST APIs and experience building or supporting CyberArk integrations.
  • Excellent client-facing communication skills for both technical teams and executive stakeholders.
  • Ability to manage ambiguity, shifting priorities, and multiple client engagements simultaneously.
  • Strong documentation skills and attention to detail.
  • CyberArk certifications such as CDE, Sentry, Defender, or equivalent are preferred.
  • Experience with CyberArk cloud offerings, including Privilege Cloud and the Identity Security Platform, is preferred.
  • Exposure to other IAM/PAM tools such as BeyondTrust, Delinea, SailPoint, or Okta is preferred.
  • Experience with DevOps and secrets manager use cases such as CyberArk Conjur or AAM is preferred.
  • Background in regulated industries and compliance frameworks such as SOX, HIPAA, or PCI-DSS is preferred.
  • Must be based in the US for this 100% remote position.

Benefits

  • Remote workforce primarily for U.S.-based employees.
  • Group medical insurance options, including a Zero Deductible PPO Plan and a High Deductible Health Plan with HSA.
  • GuidePoint covers a significant portion of employee and family health premiums.
  • Group dental insurance with 100% of employee premium covered and 75% of family premiums covered.
  • 12 corporate holidays and a Flexible Time Off (FTO) program.
  • Healthy mobile phone and home internet allowance.
  • Eligibility for a retirement plan after 2 months at open enrollment.
  • Pet benefit option.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Hasbro

Principal Identity Engineer

Hasbro 5K-10K Consumer Goods

Wizards of the Coast is hiring a Principal Identity Engineer to own the technical direction of its enterprise identity architecture, supporting Zero Trust, privileged access, and identity governance across cloud and on-premises environments.

United States Full-time Lead Security Engineer
$173k-$259k
Active Directory CI/CD Git OpenID Connect PowerShell Pulumi Python REST API SAML Terraform
13 hours, 18 minutes ago
Dragos

Senior Device Engineer

Dragos 251-1K Professional Services

Dragos is hiring a Senior Device Engineer to build automation software that identifies, fingerprints, and interacts with network-connected devices across critical infrastructure environments.

United States Full-time Senior Embedded Systems Engineer Security Engineer
$165k-$165k
Cybersecurity Docker Embedded Systems Go HTTP JavaScript Node.js TCP/IP TLS TypeScript
13 hours, 18 minutes ago
Jolera

Elastic Engineer

Jolera 251-1K Internet Software & Services

Jolera is seeking an Elastic Engineer to design and operate scalable Elasticsearch-based environments for cybersecurity analytics, threat hunting, and detection workflows.

India Full-time Senior DevOps Engineer Security Engineer
Cybersecurity Elasticsearch Encryption Java Kibana Linux Logstash Machine Learning Python Ruby
13 hours, 48 minutes ago
BeyondTrust

Staff Software Development Engineer - Windows Endpoint

BeyondTrust 1K-5K Professional Services

BeyondTrust is hiring a Staff Software Development Engineer to own Windows kernel-mode enforcement for its Identity Security Platform, building real-time security controls that decide whether actions on Windows endpoints are permitted or denied.

United States Canada Full-time Lead Security Engineer Software Engineer
Agile C C++ Rust
13 hours, 48 minutes ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers