CyberArk Engineer - Privileged Session Management (PSM) Connector Specialist

We are seeking an expert CyberArk Engineer specializing in Privileged Session Management (PSM) to anchor our next-generation PAM expansion initiative. In this critical role, you will take ownership of the PSM ecosystem-leading web connector development via a standardized Factory model, streamlining intake requests, engineering complex thick client integrations, and driving rigorous capacity and architectural planning.

KEY RESPONSIBILITIES

1. PSM Web Connector Assessment & Factory Template Development

Evaluate target web applications to determine integration pathways and establish secure, automated privileged session flows.

Design, develop, test, and deploy robust custom CyberArk PSM Web Connectors using Selenium, Autolt, and web automation frameworks.
Build and maintain a scalable Web Connector Factory template to accelerate onboarding and standardize code quality across teams.

Manage the end-to-end connector intake request queue, collaborating with application owners to scope requirements and deliver timely automated solutions.

2. PSM Thick Client Development & Engineering

Architect, configure, and publish non-standard PSM thick client applications (e.gISQL Server Management Studio, Oracle SQL Developer, 'custom client binaries via RDP/SSH).

Harden PSM servers, configure security policies, and enforce comprehensive auditing and session recording guardrails.

Perform routine maintenance, advanced troubleshooting, and performance tuning for PSM components, Session Managers, and HTML5 Gateways.

3. Capacity Planning & Architecture

Conduct comprehensive assessments of current and projected PSM capacity requirements, analyz concurrent user loads, recording storage metrics, and network bandwidth.

Design highly available (HA), resilient, and scalable PSM architectures across distributed enterprise and cloud/hybrid infrastructures.

Partner with enterprise architecture and compliance teams to formulate guidelines for session isolation, credential safeguarding, and disaster recovery.

REQUIRED QUALIFICATIONS

Experience: 4+ years of hands-on CyberArk implementation and administration, with deep expertise in PSM architecture.

Automation Stack: Proven skill in writing web connectors utilizing Selenium, C#, PowerShell, Python, or JavaScript.

Thick Client Mastery: Extensive experience publishing and securing non-standard thick clients.

Core PAM: Deep familiarity with CyberArk Vault, PVWA, CPM, PSM, and HTML5 Gateway.

Infrastructure: Strong grasp of Windows Server, Active Directory, GPO, load balancing, and network routing.

PREFERRED QUALIFICATIONS

Certifications: CyberArk Certified Delivery Engineer (CCDE) or CyberArk Certified Trustee.

Factory Frameworks: Demonstrated experience implementing a 'Connector Factory or self-service intake framework.

Cloud/Modern Ops: Exposure to containerized environments (Docker/K8s) or cloud-hosted PAM components (AWS/Azure).

Analytical Mindset: Advanced capability in troubleshooting complex DOM structures and session anomalies.