Description

Responsibilities:

Serve as the senior technical SME for CyberArk PAM, CyberArk Secrets Vault, and enterprise secrets management platforms.

Apply Site Reliability Engineering (SRE) principles to identity platforms, focusing on availability, scalability, resilience, and performance.

Lead vulnerability remediation efforts, including configuration hardening, patching, and architectural improvements.

Identify and drive remediation or removal of non-standard identity technologies.

Design and maintain high availability and disaster recovery architectures for PAM and vault services.

Develop and maintain automation for provisioning, secrets rotation, access workflows, and operational tasks.

Implement and enhance monitoring, logging, alerting, and observability for identity services.

Lead or support incident response, root cause analysis (RCA), and post-incident improvements related to identity platforms.

Partner with Identity Engineering, Cyber Security, Cloud, and Application teams to integrate reliability and security controls into solutions.

Contribute to standards, runbooks, operational documentation, and architectural guidance.

Support audits, risk assessments, and compliance initiatives related to privileged access and secrets management.

Required Skills:

Extensive hands-on experience with CyberArk PAM (EPM, PSM, PSMSession, CPM, PVWA).

Strong expertise in CyberArk Secrets Vault, HashiCorp Vault, and enterprise secrets management solutions.

Proven experience as a Site Reliability Engineer (SRE) or Senior Production Operations Engineer.

Deep understanding of Identity and Access Management (IAM), privileged access, and Tier 0 security concepts.

Experience managing identity platforms across on-premises and public cloud environments (AWS, Azure, GCP).

Strong background in Linux/Unix systems, networking, and security fundamentals.

Expertise in automation and scripting using Python, PowerShell, or Bash.

Experience with monitoring and observability tools, including logs, metrics, and alerting.

Strong incident management, troubleshooting, and root cause analysis skills.

Ability to influence engineering teams and drive reliability improvements without direct authority.

Experience with cloud security practices.

Strong Linux and Python expertise.

Preferred Skills:

Experience with HashiCorp Vault and CyberArk.

Knowledge of cloud-native secrets services such as AWS Secrets Manager, Azure Key Vault, and GCP Secret Manager.

Infrastructure as Code experience using Terraform, ARM, or CloudFormation.

Familiarity with Zero Trust and Identity Threat Detection & Response (ITDR) concepts.

Experience supporting regulatory, audit, and compliance requirements related to IAM and PAM.

Knowledge of Kubernetes secrets management and CI/CD pipeline integrations.

Prior experience in large-scale enterprise or regulated environments.

Strong documentation, communication, and stakeholder management skills

Key Skills

Education

Bachelor's degree