CyberArk PAM & EPM Senior Engineer Assistant Manager

Job Summary

The Senior Engineer – CyberArk PAM & EPM is responsible for the administration, operational support, implementation, and continuous improvement of CyberArk Privilege Cloud (PAM) and Endpoint Privilege Manager (EPM) platforms. This individual contributor role focuses on ensuring platform availability, privileged account security, endpoint privilege management, compliance readiness, and operational excellence.

The role works closely with Cyber Security, IAM, Infrastructure, Cloud, and Application teams to support privileged access management services, implement security controls, drive least-privilege initiatives, and maintain a secure and efficient PAM/EPM environment.

Responsibilities

• Administer and support CyberArk Privilege Cloud (PAM) and Endpoint Privilege Manager (EPM) platforms, including account onboarding, password management, session monitoring, and policy administration.
• Manage CyberArk components such as PVWA, CPM, PSM, PSMP, CCP, Safes, Platforms, and EPM policies, rules, application control, and privilege elevation configurations.
• Support privileged account lifecycle management across Windows, Linux, Cloud, and Application environments.
•  Monitor platform health, performance, operational metrics, and ensure service reliability.
• Provide L2/L3 technical support, troubleshoot incidents, perform root cause analysis, and support Incident, Change, and Problem Management processes.
• Drive privileged access governance and least-privilege initiatives to strengthen security controls and reduce privileged access risks.
• Support audit, compliance, risk management, and security assessment activities by maintaining required evidence and documentation.
• Develop and maintain automation solutions using PowerShell, REST APIs, and scripting tools to improve operational efficiency.
• Support integrations with Active Directory, Entra ID, ServiceNow, SIEM, Azure, AWS, and GCP platforms.
• Participate in platform upgrades, onboarding projects, M&A integrations, and continuous service improvement initiatives.
•  Maintain runbooks, SOPs, KB articles, operational documentation, governance dashboards, and KPI reporting.
• Collaborate with Security, IAM, Infrastructure, Cloud, and Application teams to enhance PAM and EPM services and drive security-focused improvements.

Skills and Experience

Skills

·English B2+ or Higher

·CyberArk Privilege Cloud (Identity Administration, PVWA, CPM, PSM, PSMP, CCP)

· CyberArk Endpoint Privilege Manager (EPM)

· Active Directory, Entra ID, Azure

· ServiceNow

· PowerShell, REST APIs

Education / Professional Experience/ Qualifications

· Preferred Certifications

o CyberArk Defender/Sentry

o CyberArk Certified Delivery Engineer (CDE) – Privilege Cloud

o CyberArk Defender – EPM

o ITIL Foundation (Good to have)

Preferred Experience

o CyberArk Privilege Cloud SaaS Administration and Support

o CyberArk EPM Policy Administration and Endpoint Onboarding

o Privileged Account Lifecycle Management

o Password Vault and Session Management Operations

o Global Service Operations and Support Models