PAM Engineer

Summary: The PAM Operations & Platform Engineer role is vital for securing and managing privileged access throughout the organization. You will focus on operational support, systems management, and continuous improvement of the Idira PAM platform.

Responsibilities:

• Monitor, support, and maintain the Privileged Access Management (PAM) environment.

• Perform health checks, incident resolution, service request fulfilment, and operational support activities.

• Troubleshoot privileged accounts, password rotation and reconciliation issues, safes, policies, session management, authentication, integrations, and connectivity challenges.

• Manage and maintain Privilege Cloud connector servers, including patching, upgrades, certificate management, recovery, and redeployment.

• Onboard and maintain privileged accounts, target systems, safes, platforms, and policies.

• Configure and test architect-approved PAM solutions and enhancements.

• Support the rollout and ongoing operation of WPM, EPM, Vendor PAM, and other Idira PAM capabilities.

• Contribute to automation and integrations using APIs, PowerShell, and other supported technologies.

• Participate in major incident management, root cause analysis, disaster recovery testing, and break-glass exercises.

• Maintain operational documentation, troubleshooting guides, compliance evidence, and audit records.

• Collaborate closely with infrastructure, security, identity, application, and architecture teams.

Must Haves:

• 3-5 years of experience with CyberArk/Idira Privilege Cloud environments.

• Strong practical knowledge of privileged account management, safes, access permissions, password management, CPM, PSM, and session management.

• Experience with managing and troubleshooting Privilege Cloud connectors.

• Knowledge of Windows and Linux environments, Active Directory, Entra ID, SSO, and MFA technologies.

• Understanding of PAM business continuity and emergency access processes.

• Ability to implement and configure solutions based on technical designs.

• Experience with incident, problem, and change management processes.

Nice to Haves:

• Hands-on experience with multiple Idira PAM capabilities, including Privilege Cloud, WPM, EPM, and Vendor PAM.

• Experience with PAM integrations, APIs, and automation.

• Experience in a GxP-regulated environment, preferably in the pharmaceutical or life sciences industry.

• Understanding change control processes, validation requirements, and compliance documentation.

• Experience with ServiceNow, SIEM integrations, PowerShell, Linux, and SSH.

• Relevant CyberArk or Idira certifications.

Other Details:

• Location: Warsaw Hub (hybrid working)

• Team Structure: Close collaboration with security and infrastructure teams.

• Operational Environment: Must be comfortable in a regulated enterprise environment.