CyberArk PAM & EPM Lead

Job Summary

Lead the engineering, administration, implementation, and support of CyberArk Privilege Cloud (PAM) and Endpoint Privilege Manager (EPM). Act as the technical lead for PAM initiatives, automation, operational excellence, and governance.

Responsibilities

· Lead administration and support of CyberArk Privilege Cloud and EPM platforms.

· Manage Safes, Platforms, CPM, PSM, PSMP, CCP, and privileged account onboarding.

· Design and maintain EPM policies, Sets, Rules, Application Control, and Privilege Elevation policies.

· Manage endpoint onboarding, agent deployment, policy tuning, and exception handling.

· Drive password management, session monitoring, and privileged access governance.

· Troubleshoot PAM and EPM platform issues and act as L3/L4 escalation point.

· Develop automation using PowerShell, REST APIs, and Python.

· Integrate CyberArk with Active Directory, Entra ID, ServiceNow, SIEM, Azure, AWS, and GCP.

· Lead PAM/EPM implementation, upgrades, M&A integrations, and operational improvements.

· Review, tune, and optimize EPM policies to reduce false positives and user impact.

· Maintain runbooks, SOPs, KB articles, compliance evidence, and audit documentation.

· Mentor engineers and support service maturity, reporting, and governance activities.

Skills and Experience

Skills

· English Level B2+

· CyberArk Privilege Cloud (Identity Administration,PVWA, CPM, PSM, PSMP, CCP)

· CyberArk Endpoint Privilege Manager (EPM)

· Active Directory, Entra ID, Azure

· ServiceNow

· PowerShell, REST APIs

· Windows & Linux Administration

· Incident, Change, and Problem Management

Education / Professional Experience/ Qualifications

· Preferred Certifications

o CyberArk Sentry / Certified Delivery Engineer ( CDE – Privilege Cloud , CDE – EPM )

o ITIL Foundation

· Preferred Experience

o Privilege Cloud SaaS Operations

o EPM Policy Design & Administration

o PAM/EPM M&A Integrations

o Automation & Reporting

o Global Support and Governance Models