Cyber Security_PAM Engineer - CyberArk & Hashicorp Vault (

Description

a. The PAM Engineer will provide L2/L3 operational support for CyberArk and HashiCorp Vault platforms to ensure secure management of privileged accounts, credentials, and secrets across the enterprise.
b. The role involves maintaining CyberArk components such as PVWA, PSM, CPM, and Vaults, along with managing onboarding and rotation of privileged accounts and SSH keys.
c. The engineer will support HashiCorp Vault operations including secret engines, policies, authentication methods, token lifecycle, and integrations with applications.
d. They will troubleshoot platform issues including vault replication failures, onboarding errors, CPM/rotation failures, session connection issues, and policy misconfigurations.
e. The role requires executing platform upgrades, certificate renewals, DR validations, and configuration changes across lower and production environments.
f. The engineer will participate in incident and problem management processes, performing root cause analysis and implementing configuration fixes or policy corrections.
g. They will also support audit and compliance efforts by generating access reports, validating controls, and maintaining operational documentation.
h. The candidate should have strong experience with privileged access workflows, PAM security best practices, API-based integrations, and directory services such as AD/LDAP.