JustJoin.IT Hybrydowo Senior ↻

PAM Engineer

emagine Polska

⚲ Warszawa

Do uzgodnienia

Wymagania

  • CyberArk
  • Privileged Access Management
  • Powershell

Opis stanowiska

Summary: The PAM Operations & Platform Engineer role is vital for securing and managing privileged access throughout the organization. You will focus on operational support, systems management, and continuous improvement of the Idira PAM platform.Responsibilities:
• Monitor, support, and maintain the Privileged Access Management (PAM) environment.
• Perform health checks, incident resolution, service request fulfilment, and operational support activities.
• Troubleshoot privileged accounts, password rotation and reconciliation issues, safes, policies, session management, authentication, integrations, and connectivity challenges.
• Manage and maintain Privilege Cloud connector servers, including patching, upgrades, certificate management, recovery, and redeployment.
• Onboard and maintain privileged accounts, target systems, safes, platforms, and policies.
• Configure and test architect-approved PAM solutions and enhancements.
• Support the rollout and ongoing operation of WPM, EPM, Vendor PAM, and other Idira PAM capabilities.
• Contribute to automation and integrations using APIs, PowerShell, and other supported technologies.
• Participate in major incident management, root cause analysis, disaster recovery testing, and break-glass exercises.
• Maintain operational documentation, troubleshooting guides, compliance evidence, and audit records.
• Collaborate closely with infrastructure, security, identity, application, and architecture teams.

Must Haves:
• 3-5 years of experience with CyberArk/Idira Privilege Cloud environments.
• Strong practical knowledge of privileged account management, safes, access permissions, password management, CPM, PSM, and session management.
• Experience with managing and troubleshooting Privilege Cloud connectors.
• Knowledge of Windows and Linux environments, Active Directory, Entra ID, SSO, and MFA technologies.
• Understanding of PAM business continuity and emergency access processes.
• Ability to implement and configure solutions based on technical designs.
• Experience with incident, problem, and change management processes.

Nice to Haves:
• Hands-on experience with multiple Idira PAM capabilities, including Privilege Cloud, WPM, EPM, and Vendor PAM.
• Experience with PAM integrations, APIs, and automation.
• Experience in a GxP-regulated environment, preferably in the pharmaceutical or life sciences industry.
• Understanding change control processes, validation requirements, and compliance documentation.
• Experience with ServiceNow, SIEM integrations, PowerShell, Linux, and SSH.
• Relevant CyberArk or Idira certifications.

Other Details:
• Location: Warsaw Hub (hybrid working)
• Team Structure: Close collaboration with security and infrastructure teams.
• Operational Environment: Must be comfortable in a regulated enterprise environment.

🔍 Dekoder Ogłoszenia

🟡
continuous improvement of the Idira PAM platform
Oczekuje się aktywnego udziału w rozwoju i optymalizacji istniejących rozwiązań PAM, co może oznaczać konieczność proponowania i wdrażania zmian.
🔴
troubleshoot privileged accounts, password rotation and reconciliation issues, safes, policies, session management, authentication, integrations, and connectivity challenges
Zakres problemów do rozwiązania jest bardzo szeroki i obejmuje wiele złożonych obszarów systemu PAM, co może wymagać głębokiej wiedzy technicznej i doświadczenia.
🟡
Contribute to automation and integrations using APIs, PowerShell, and other supported technologies
Oczekuje się nie tylko utrzymania, ale także aktywnego tworzenia skryptów automatyzujących procesy i integrujących systemy, co może wymagać umiejętności programistycznych.
🔴
Participate in major incident management, root cause analysis, disaster recovery testing, and break-glass exercises
Rola może wiązać się z koniecznością reagowania na poważne awarie i uczestnictwa w ćwiczeniach, które mogą odbywać się poza standardowymi godzinami pracy.
🟡
Collaborate closely with infrastructure, security, identity, application, and architecture teams
Wymagana jest dobra komunikacja i umiejętność pracy w zespole z różnymi działami, co może oznaczać potrzebę tłumaczenia zagadnień technicznych na język biznesowy.