Overview In this role you lead the design, build, and operation of the CyberArk (Idira) Privileged Access Management platform, acting as the product owner for the PAM roadmap. You will guide technical direction, mentor the IAM team, and align security controls with business risk and regulatory priorities. You'll drive automation, onboarding, and compliance initiatives, influencing senior stakeholders and delivering continuous improvements in privileged access at scale.
Compensation / Benefits- Health and Welfare Benefits
- Paid time off and holidays
- 401(k) plan with company contributions
- Retirement benefits; pension plan (where eligible)
- Short-term incentive bonus eligibility
- Disability leave (short/long-term)
Responsibilities- Lead design, build and maintenance of CyberArk PAM (Idira) platform including Vault, Safes, targets and session management across the organization
- Own and prioritise the PAM backlog and act as product owner for the privileged access roadmap
- Oversee privileged account onboarding and credential rotation automation via CPM, integrating with AD/Entra ID, Windows, Unix/Linux, databases and network devices
- Define and govern privileged access policies, least-privilege and just-in-time access models; conduct session reviews
- Serve as the senior technical authority on PAM within IAM; drive automation aligned with security policies
- Influence senior stakeholders to align PAM roadmap with risk and regulatory priorities
- Develop IAM team capabilities through mentoring, process improvements, and documentation
- Oversee configuration/troubleshooting of CyberArk connectors (PSM, CPM, PVWA) to various targets, hands-on as needed
- Author/review custom platforms, components, and automation scripts (CyberArk REST API, PACLI, PowerShell, Python)
- Govern privileged session recording, Safe membership reviews, and account discovery initiatives
- Ensure platform health, credential rotation, session recording integrity, and audit trails
- Lead sprint planning, backlog grooming, and roadmap reviews
- Communicate roadmap status to leadership and stakeholders
- Oversee privileged account lifecycle (onboarding/offboarding/updates)
- Ensure compliance with policies/regulations and escalate risks as needed
- Own response to audit findings and remediation
- Provide senior technical input for escalated issues and support tickets
Key requirements- 5+ years in IAM/PAM SaaS engineering
- 3+ years hands-on CyberArk (Idira) PAM experience (Vault, CPM, PSM, PVWA) and team leadership
- Strong PAM concepts understanding (lifecycle, rotation, session monitoring, least-privilege, just-in-time)
- Experience integrating CyberArk with AD/Entra ID, Windows, Unix/Linux, databases, network devices, SaaS apps
- Scripting proficiency: CyberArk REST API, PACLI, PowerShell, Python
- Knowledge of identity/secrets standards: SAML, OAuth2/OIDC; secrets management (Conjur/AAM or equivalent)
- Experience with access governance frameworks and compliance mapping (ISO 27001, SOC 2, GDPR)
- Proven ability to write user stories, manage backlogs, and collaborate with agile teams
- Strong stakeholder communication; ability to translate technical details for engineers and business stakeholders
- Good project management skills
- Positive, team-first attitude; strong verbal/written communication; analytical and problem-solving abilities
- stakeholder communication
- mentorship
- team collaboration
- CyberArk PAM (Idira) including Vault, CPM, PSM, PVWA
- CyberArk REST API, PACLI
- PowerShell
