Cyberark - Pam, Epm

**Job Information**:
Date Opened
- 10/13/2025

Job Type
- Full time

Industry
- IT Services

Remote Job

This is a remote position.

**Key Responsibilities**:

- Design, deploy, and maintain **CyberArk PAM and EPM solutions** across on-premises and cloud environments.
- Manage and administer **Vaults, Safes, Policies, Accounts, and Platforms** in CyberArk.
- Implement **password rotation, account onboarding, and session management** using CyberArk tools (PVWA, CPM, PSM).
- Configure and enforce **least privilege policies** for endpoints using **CyberArk EPM**.
- Integrate CyberArk with enterprise systems such as **Active Directory, SIEM, ServiceNow, and MFA/SSO** platforms.
- Automate CyberArk operations through **REST APIs, PowerShell, or Python scripts**.
- Perform **troubleshooting, upgrades, patching, and health checks** for CyberArk environments.
- Monitor privileged sessions and generate **audit and compliance reports**.
- Collaborate with Information Security, Infrastructure, and Compliance teams to align with corporate security standards.
- (Optional) Implement and support **CyberArk Privileged Cloud** and **Application Access Manager (AAM)** for DevOps and cloud integration.

**Mandatory Skills**:

- Strong hands-on experience in **CyberArk PAM (Privileged Access Management)**
- Experience in **CyberArk EPM (Endpoint Privilege Manager)** deployment and policy creation
- Expertise in managing **Vault, PVWA, CPM, and PSM components**
- Experience in **privileged account onboarding, password rotation, and policy management**
- Knowledge of **Active Directory, Windows, Linux, and network security principles**
- Scripting knowledge in **PowerShell / Python** for automation
- Experience with **compliance standards (ISO 27001, SOC2, NIST)**

**Nice-to-Have Skills**:

- CyberArk **Privileged Cloud** implementation experience
- Knowledge of **Application Access Manager (AAM)** for DevOps or API-based integrations
- Integration with **cloud environments (AWS, Azure, GCP)**
- Familiarity with **Identity and Access Management (IAM)** and **Zero Trust Security**
- CyberArk **Defender or Sentry certification