CyberArk Engineer

Job Role : CyberArk PAM Engineer

Job Type : FTE

Location : Dubai, UAE

• 5+ years of dedicated PAM experience, with strong knowledge of CyberArk Vault, PVWA, CPM, PSM, Windows/Linux security, Active Directory, LDAP, IAM, SIEM integration, networking, and PowerShell/Python scripting.
• Design CyberArk architecture, deploy and configure core components (EPV, CPM, PVWA, PSM), establish distributed architectures and disaster recovery sites, and develop custom plugins and universal connectors.
• Integrate CyberArk PAM with Active Directory, SIEM tools, APIs, and standard platforms; configure connection components and automate workflows.
• Manage Master Policy settings, safe structures, permissions, retention periods, dual-control workflows, and onboarding of privileged IDs, service accounts, and SSH keys.
• Administer privileged account onboarding, access provisioning and revocation, safe permissions, platform configurations, and connection component settings.
• Perform daily health checks of Vault, CPM, PVWA, and PSM; analyze logs, troubleshoot replication and credential provider failures, and apply patches, upgrades, and security hotfixes.
• Resolve escalated L2 incidents, including CPM password rotation failures and PSM session errors; perform root-cause analysis and coordinate with CyberArk support.
• Strengthen security by enforcing MFA and least privilege, reviewing privileged session recordings and anomalous activities, identifying unmanaged privileged accounts, eliminating hardcoded credentials, deploying CyberArk Secrets Manager, and analyzing PTA events.
• Conduct Vault hardening, align policies with CIS benchmarks, remediate anomalous privilege behaviour, and lead audit compliance mapping.
• CyberArk CDE certification, with CyberArk Defender (PAM-DEF) preferred; strong analytical, troubleshooting, communication, and technical documentation skills.