Responsibilities:
- Define and own the enterprise‑wide CyberArk architecture (Vault, CPM, PSM, PVWA, Conjur, ) to support the banks technical accounts inventory.
- Design and enforce privileged‑access policies (least‑privilege, separation‑of‑duties, time‑bound access) across Windows, Linux, UNIX, databases, cloud platforms (AWS, Azure, GCP)
- Provide high-availability support for the CyberArk, establishing robust monitoring, incident-response, and disaster-recovery processes that keep critical services up and running 24×7.
- Drive the secret‑management lifecycle – automatic password rotation, SSH key management, API‑credential vaulting, and on‑demand retrieval.
- Partner with engineering, application, and cloud teams to embed secure identity controls into every new service launch, migration, or platform upgrade.
- Automate PAM processes using PowerShell, Python, and CyberArk REST APIs (e.g., bulk onboarding/off‑boarding, credential rotation schedules).
- Evaluate emerging PAM technologies (e.g., CyberArk Conjur, Secret-Zero, Zero-Trust Privilege) and build business cases for adoption.
- Collaborate with DevSecOps, Cloud, and Application teams to embed privileged-access controls into CI/CD pipelines and cloud-native workload
Requirements:
- Requires a minimum of 8+ years of experience as security professional
- Bachelor’s degree in computer science, Information Security, or related field (Master’s).
- Hands-on experience architecting, deploying, and operating CyberArk PAS (Vault, CPM, PSM, PVWA) at enterprise scale.
- Conjur (CyberArk) – L3 – policy-as-code (CPL/HCL), secret rotation, dynamic secrets, Kubernetes side-car injection, API/CLI integrations
- Deep expertise in CyberArk Core PAS components and CyberArk Privileged Threat Analytics.
- Strong knowledge of Windows/UNIX/Linux authentication mechanisms, Kerberos, LDAP/AD, SSH, database authentication.
- Experience integrating CyberArk with SSO/IdP solutions (SAML, OIDC, AD).
- Proficiency in PowerShell, Python, and CyberArk REST API for automation.
- Familiarity with cloud providers (AWS Secrets Manager, Azure Key Vault) and Hybrid‑IAM environments.
- Solid understanding of Zero‑Trust concepts for privileged access.
- Excellent interpersonal and communication skills; ability to influence and motivate
- Leverage PAM analytics (session recordings, anomaly scores) to drive risk-based decisions
- Ability to handle high pressure situations with key stakeholders to collaborate and communicate effectively and respectfully with both business-oriented executives and technology-oriented personnel in teams across the organization
Specific qualifications:
- CyberArk Certified Defender (CCD)
- Secrets Manager (Conjur) certified
•Work-life balance: Hybrid working mode and 18 days of Annual leave
•Health & insurance: Comprehensive coverage including General Practitioner, hospitalization, dental, and optical
•Performance incentives: Annual bonus based on individual performance
•Learning & development: Training programs, certification opportunities, and training incentives to support career growth
•Team culture: Regular team-building activities and social events
