CyberArk Engineer

Job Role : CyberArk PAM Engineer Job Type : FTE Location : Dubai, UAE 5+ years of dedicated PAM experience, with strong knowledge of CyberArk Vault, PVWA, CPM, PSM, Windows/Linux security, Active Directory, LDAP, IAM, SIEM integration, networking, and PowerShell/Python scripting. Design CyberArk architecture, deploy and configure core components (EPV, CPM, PVWA, PSM), establish distributed architectures and disaster recovery sites, and develop custom plugins and universal connectors. Integrate CyberArk PAM with Active Directory, SIEM tools, APIs, and standard platforms; configure connection components and automate workflows. Manage Master Policy settings, safe structures, permissions, retention periods, dual-control workflows, and onboarding of privileged IDs, service accounts, and SSH keys. Administer privileged account onboarding, access provisioning and revocation, safe permissions, platform configurations, and connection component settings. Perform daily health checks of Vault, CPM, PVWA, and PSM; analyze logs, troubleshoot replication and credential provider failures, and apply patches, upgrades, and security hotfixes. Resolve escalated L2 incidents, including CPM password rotation failures and PSM session errors; perform root-cause analysis and coordinate with CyberArk support. Strengthen security by enforcing MFA and least privilege, reviewing privileged session recordings and anomalous activities, identifying unmanaged privileged accounts, eliminating hardcoded credentials, deploying CyberArk Secrets Manager, and analyzing PTA events. Conduct Vault hardening, align policies with CIS benchmarks, remediate anomalous privilege behaviour, and lead audit compliance mapping. CyberArk CDE certification, with CyberArk Defender (PAM-DEF) preferred; strong analytical, troubleshooting, communication, and technical documentation skills. Show more Show less