For our international customer in Valencia, we are looking for a hybrid PAM (Privileged Access Management) Engineer Cyber Ark/IAM.
EU candidates are welcome to apply. Candidates need to be based in Valencia or willing to relocate to Valencia. Candidates need to be flexible to work 3 hours in US Eastern Time where requir
ed
Work permit is not provided. Candidates need to be fluent in Engli
sh.
Tasks and responsibilit ies: Install, configure, and maintain Cyber Ark components including Vault, PVWA, CPM, PSM, PTA, and Con jur; Perform onboarding of privileged accounts across platforms such as Windows, Linux, databases (Oracle, SQL), cloud, and application environments, ensuring proper classification and secure vault ing; Manage end-to-end privileged account lifecycle including inventory collection, validation, ownership mapping, approval coordination, and onboard ing; Implement and manage Just-in-Time (JIT) privileged access and session management contr ols; Enforce password and credential management policies including automated password rotation, password complexity enforcement, and secure credential stor age; Manage secrets for applications using Conjur or equivalent secrets management soluti ons; Identify and manage accounts requiring special handling (e.g., service accounts, shared accounts, non-rotating accounts), ensuring appropriate controls and risk mitigat ion; Monitor password compliance and remediate accounts not adhering to defined rotation or policy standa rds; Provide Level 2/3 support for PAM-related incidents and service reque sts; Troubleshoot issues related to Cyber Ark and integrations with Active Directory, Entra ID (Azure AD), IAM tools, SIEM platforms, and Service Now; Perform regular health checks, system monitoring, patching, and upgrades of Cyber Ark infrastruct ure; Automate PAM processes using scripting and APIs (Power Shell, Python, REST APIs, ps PAS) to reduce manual eff ort; Support bulk onboarding and large-scale privileged account management through automation and standardized meth ods; Design and support integrations between PAM and enterprise IAM systems (e.g., Sail Point, Saviynt, Entra ID) for identity lifecycle and access governance alignm ent; Maintain documentation including SOPs, onboarding procedures, runbooks, and automation scri pts; Collaborate with application, infrastructure, and cloud teams to enforce least privilege access and secure credential us age; Participate in audit and compliance activities by providing evidence, reporting, and demonstrating control effectiven ess; Support governance activities including account recertification, ownership validation, and compliance monitor
ing;
Pro file: Bachelor or Master de gree;+4 years of experience in IT security, IAM, or PAM enginee ring; Strong hands-on experience with Cyber Ark PAM suite (Vault, CPM, PSM, P VWA); Experience with Cyber Ark Conjur or other enterprise secrets management solut ions; Strong understanding of Just-in-Time (JIT) access and privileged session manage ment; Experience integrating PAM with IAM platforms (e.g., Sail Point, Saviynt, Entra ID / Azure AD); Experience managing privileged access in cloud environments (Azure, AWS); Strong understanding of Windows, Linux, Active Directory, and database systems (Oracle, SQL); Strong scripting and automation experience (Power Shell, Python, REST A PIs); Experience with ITSM tools such as Service Now and incident/change management proce sses; Knowledge of security controls, audit frameworks, and compliance stand ards; Strong analytical and problem-solving sk
ills;
Preferred qualifica tions: Cyber Ark Defender / Sentry certific ation; Experience implementing Conjur in Dev Ops / CI-CD environ ments; Experience with Privileged Threat Analytics (PTA) or advanced monitoring tools; Exposure to container platforms (Kubernetes, Open Shift) and secrets manag ement; Familiarity with Zero Trust security archite
cture;