LHH is working with a Financial Services company based on the East Coast that is looking to hire an IAM Systems Admin who has solid experience with Cyberark PAM. This will be a 1 year project and be 100% remote. This is a mid-level position and is looking for someone with at least 2 years of IAM Administration and CyberArk PAM.
The IAM Systems Administrator – CyberArk Privilege Cloud will be responsible for the administration, operational support, and continuous optimization of the organization’s CyberArk Privileged Access Management (PAM) platform.
This role ensures the secure management of privileged credentials, secrets, and session activity across hybrid infrastructure (cloud and on-prem), enabling the enforcement of least-privilege access, Zero Standing Privileges (ZSP), and Just-in-Time (JIT) access models.
As part of the Identity and Access Management (IAM) team, this position will work closely with security, cloud, infrastructure, and compliance teams to support key security initiatives, maintain policy enforcement, and ensure operational resilience of PAM services in alignment with Zero Trust Architecture principles.
Position Accountabilities
· Operate and maintain CyberArk Privileged Cloud environments.
· Onboard and manage privileged accounts, secrets, safes, and credentials using:
- PVWA (Password Vault Web Access)
- PSM (Privileged Session Manager)
- CPM (Central Policy Manager)
· Basic troubleshooting as it relates to safes, privileged accounts, password rotation and policy issues.
· Ensure healthy state of integrations of CyberArk with various platforms, including Windows, Linux, databases, applications, and cloud services (AWS, Azure, GCP).
· Monitor the health and performance of CyberArk components.
· Configure and enforce security policies for privileged access at safe and platform levels.
· Manage CyberArk integrations with SIEM, ITSM, and other enterprise tools.
· Work with internal teams (security, audit, compliance) to meet regulatory and governance requirements.
· Create and maintain documentation related to PAM operations, procedures, and configurations.
· Support audits by providing logs, access reports, and evidence of controls.
Required
· Must have 2+ years of hands-on operational experience with CyberArk PAM.
· Minimum 2 year college degree required.
· CyberArk certification.
· Must have experience onboarding and configuring accounts, safes, & policies.
· Strong understanding of IAM, PAM, and Zero Trust principles.
· Familiarity with Vault, PVWA, PSM, CPM, and Conjur (optional).
· Strong knowledge of Active Directory, LDAP, and RBAC models.
· Excellent problem-solving and communication skills.
Preferred
· Bachelor’s degree in Information Security, Computer Science, Information Systems Management, or related field.
· Experience with CyberArk Endpoint Privileged Management (EPM).
· Experience with CyberArk Workforce Password Manager (WPM).
· Experience with cloud platforms (e.g., AWS IAM, Azure AD, etc.).
· SailPoint IIQ or ISC experience
· Any additional industry PAM level certifications
· Experience responding to security incidents and provide root cause analysis for PAM-related events.
· CyberArk workflows for automation and integration tasks.
· Experience with scripting (PowerShell, Python, etc.)
· Professional security management certification such as a Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Information Systems Auditor (CISA) or other similar credentials preferred.
· Knowledge of compliance frameworks (HIPAA, PCI-DSS, SOX).
Tools & Technologies:
· CyberArk, PVWA, CPM, PSM, PTA
· Windows/Linux OS
· SIEM platforms (e.g., Splunk, QRadar)
· Cloud platforms: AWS, Azure, GCP
· Scripting: PowerShell, Python, REST APIs
Knowledge & Skills
· Self-driven, detail-oriented, with excellent written and verbal communication skills, interpersonal and collaborative skills
· Ability to write technical documentation to clearly document technical processes and procedures with strong attention to detail
· High degree of initiative, dependability, and ability to work with limited supervision
· High level of personal integrity, as well as the ability to professionally handle confidential matters and procedures
