Description

You will serve as the senior technical SME for CyberArk PAM, Secrets Vault, and enterprise secrets management platforms, applying SRE principles to ensure availability, scalability, resilience, and performance.

This role is on-site.

Responsibilities

• Lead vulnerability remediation, configuration hardening, patching, and architectural improvements for identity and PAM platforms.
• Design and maintain high availability and disaster recovery architectures for PAM and vault services.
• Implement and enhance monitoring, logging, alerting, and observability for identity services.
• Drive remediation or removal of non-permitted identity technologies and support audits, risk assessments, and compliance initiatives.
• Partner with Identity Engineering, Security, and Cloud teams to embed reliability and security controls into solutions.

Required Skills

• Extensive hands-on experience with CyberArk PAM (EPM, PSM, PSMSession, CPM, PVWA).
• Strong expertise in CyberArk and HashiCorp Secrets Vault or enterprise secrets management solutions.
• Proven experience as a Site Reliability Engineer or senior production operations engineer with 5+ years of experience.
• Deep understanding of identity and access management (IAM), privileged access, and Tier 0 security concepts.
• Experience operating identity platforms across on-premises and public cloud environments (AWS, Azure, GCP).
• Strong background in Linux/Unix systems, networking, and security fundamentals.
• Expertise in automation and scripting using Python, PowerShell, or Bash.

Preferred Skills

• Experience with cloud-native secrets services (AWS Secrets Manager, Azure Key Vault, GCP Secret Manager) and Infrastructure as Code (Terraform, ARM, CloudFormation).
• Familiarity with Zero Trust, Identity Threat Detection & Response (ITDR), and container integrations (Kubernetes secrets, CI/CD pipelines).

Key Skills

Education

Bachelor's degree