Job Title: Senior CyberArk & Identity Governance Administration (IGA) Engineer

Job Title: Senior CyberArk & Identity Governance Administration (IGA) Engineer

Location: Remote
Employment Type: Contract

Job Overview

We are seeking an experienced Senior CyberArk & Identity Governance Administration (IGA) Engineer to support and enhance enterprise Privileged Access Management (PAM) and Identity Governance solutions. The ideal candidate will have deep expertise in CyberArk, strong experience with Identity Governance platforms (SailPoint, Saviynt, etc.), and a proven background in securing enterprise identities, privileged accounts, and access management processes.

In this role, you will lead CyberArk operations, strengthen privileged access controls, support identity governance initiatives, and collaborate with cross-functional security and infrastructure teams.

Key Responsibilities

• Administer and manage CyberArk Privileged Access Management (PAM) environments.
• Create and manage CyberArk Safes, ownership models, and naming standards.
• Onboard privileged accounts including:
  • Domain Administrator accounts
  • Service Accounts
  • Local Administrator accounts
  • Cloud identities
• Monitor and manage:
  • Password rotation
  • Credential verification
  • Reconcile accounts
  • Password complexity policies
  • Heartbeat monitoring
• Configure and support Privileged Session Management (PSM) and Privileged Session Manager for Web (PSMW).
• Retrieve session recordings and provide audit evidence for investigations.
• Process privileged access requests using time-bound and dual-control approval workflows.
• Conduct privileged account discovery across Windows, Linux, and Cloud environments.
• Identify unmanaged or shadow accounts and coordinate onboarding.
• Perform Safe membership reviews and remediate excessive or orphaned privileged access.
• Support CyberArk platform upgrades, patching, maintenance, and operational health monitoring.
• Troubleshoot integrations between CyberArk, SIEM platforms, Identity Governance tools, and ITSM solutions.
• Automate operational tasks using REST APIs, PowerShell, or Python.
• Support Identity Governance strategy and future platform integrations.
• Generate compliance reports, onboarding metrics, password rotation reports, and audit evidence.
• Participate in incident response activities including emergency credential rotation and access revocation.

Required Skills & Experience

• 5+ years of hands-on experience with CyberArk PAM in enterprise environments.
• Strong expertise with:
  • CyberArk Vault
  • Credential Management
  • Privileged Session Management (PSM)
  • PSM for Web
• Experience onboarding privileged accounts and platforms.
• Strong understanding of:
  • Privileged Access Management (PAM)
  • Identity & Access Management (IAM)
  • Identity Governance & Administration (IGA)
• Experience with IGA platforms such as:
  • SailPoint
  • Saviynt
  • Similar Identity Governance solutions
• Hands-on experience with:
  • Active Directory
  • Microsoft Entra ID (Azure AD)
  • LDAP
• Knowledge of authentication protocols:
  • SAML
  • OAuth
  • OIDC
  • Kerberos
• Experience supporting cloud identity in AWS, Azure, or Google Cloud Platform.
• Experience integrating Multi-Factor Authentication (MFA).
• Working knowledge of SIEM tools such as:
  • Splunk
  • Microsoft Sentinel
• Experience with:
  • ServiceNow
  • REST APIs
  • PowerShell
  • Python
• Knowledge of SCIM provisioning standards.
• Familiarity with compliance frameworks:
  • NIST
  • PCI-DSS
  • SOC
  • ISO 27001
• Experience supporting audits, compliance reporting, and access reviews.
• Excellent troubleshooting, analytical, and communication skills.

Please share Resume: