Description

Responsibilities:

• Serve as the senior technical SME for CyberArk PAM, CyberArk Secrets Vault, and enterprise secrets management platforms
• Apply Site Reliability Engineering (SRE) principles to identity platforms, including availability, scalability, resilience, and performance engineering
• Lead vulnerability remediation efforts for identity and PAM platforms, including configuration hardening, patching, and architectural improvements
• Identify, assess, and drive remediation or removal of non-permitted or non-standard identity technologies
• Design and maintain high availability and disaster recovery architectures for PAM and vault services
• Develop and maintain automation for provisioning, secrets rotation, access workflows, and operational tasks
• Implement and enhance monitoring, logging, alerting, and observability for identity services
• Lead or support incident response, root cause analysis (RCA), and post-incident improvements related to identity platforms
• Partner with Identity Engineering, Cyber Security, Cloud, and Application teams to embed reliability and security controls into solutions
• Contribute to standards, runbooks, operational documentation, and architectural guidance for identity services
• Support audits, risk assessments, and compliance initiatives related to privileged access and secrets management

Requirements:

• Extensive hands-on experience with CyberArk PAM (EPM, PSM, PSMSession, CPM, PVWA)
• Strong expertise in CyberArk and HASHI Secrets Vault and/or enterprise secrets management solutions
• Proven experience as a Site Reliability Engineer (SRE) or senior production operations engineer
• Deep understanding of identity and access management (IAM), privileged access, and Tier 0 security concepts
• Experience operating identity platforms across on-premises and public cloud environments (AWS, Azure, GCP)
• Strong background in Linux/Unix systems, networking, and security fundamentals
• Expertise in automation and scripting (e.g., Python, PowerShell, Bash)
• Experience with monitoring and observability tools (logs, metrics, alerting)
• Strong incident management, troubleshooting, and root cause analysis skills
• Ability to influence engineering teams and drive reliability improvements without direct authority
• Must adhere to a hybrid schedule requirement of a minimum of 3 days per week onsite

Desired skills:

• Experience with Hashi Secrets Vault, CyberArk
• Experience with cloud-native secrets services (e.g., AWS Secrets Manager, Azure Key Vault, GCP Secret Manager)
• Infrastructure as Code experience (Terraform, ARM, CloudFormation)
• Familiarity with Zero Trust and Identity Threat Detection & Response (ITDR) concepts
• Experience supporting regulatory, audit, and compliance requirements related to IAM and PAM
• Knowledge of container and platform integrations (Kubernetes secrets, CI/CD pipelines)
• Prior experience in large-scale enterprise or regulated environments
• Strong documentation, communication, and stakeholder engagement skills

Key Skills

Education

Bachelor's degree