Sr. IAM Engineer (CyberArk) jobs in United States
cer-icon
Apply on Employer Site
company-logo

System One · 2 days ago

Sr. IAM Engineer (CyberArk)

System One is seeking a Senior IAM Engineer for a long-term remote opportunity. The Senior Identity Access Management (IAM) Engineer will lead the design, implementation, and optimization of CyberArk Privileged Access Management (PAM) solutions, serving as the primary subject matter expert for CyberArk across the organization.

Staffing Agency
check
H1B Sponsor Likelynote
Hiring Manager
Shnaze Garmkhorani
linkedin

Responsibilities

CyberArk Solution Architecture: Design and implement CyberArk PAM solutions that meet organizational requirements. Lead technical design and architecture for complex CyberArk deployments, including integrations with enterprise systems (Active Directory, LDAP, cloud platforms)
Implementation & Configuration: Oversee installation, configuration, and customization of CyberArk, including Safe policy management, PSM connectors, CPM, password rotation, and privileged account onboarding
Stakeholder Engagement: Collaborate with business and IT stakeholders to understand requirements and translate them into CyberArk solutions aligned with security and governance goals
Privileged Access Lifecycle Management: Develop and maintain privileged access lifecycle processes (onboarding, offboarding, access certification, RBAC, access reviews)
Implement integrations with cloud platforms (Azure AD, Okta, AWS IAM), ServiceNow, and other enterprise applications
Security & Compliance: Ensure CyberArk solutions meet security, compliance, and auditing requirements (NIST, CIS, HIPAA, GDPR, etc.). Support audit requests and maintain documentation for completeness and accuracy
Automation & Optimization: Identify opportunities for process automation and operational efficiency improvements within the CyberArk platform
Disaster Recovery: Setup and maintain multi-region active-active environments in AWS for CyberArk
Mentorship & Leadership: Provide mentorship and guidance to junior team members and drive best practices for CyberArk development and implementation
Troubleshooting & Support: Troubleshoot complex issues related to CyberArk and privileged access management systems. Provide ongoing support and performance tuning for deployed solutions. Must be available after hours in the event of any outage of the identity platforms
Maintain thorough documentation for CyberArk configurations, workflows, integrations, and policies
Stay up-to-date with the latest CyberArk features, industry trends, and best practices, and bring innovative solutions to the table
Provide support for audit requests including privileged access reviews and session recordings
Maintain completeness and accuracy for onboarding all privileged accounts and systems into CyberArk
Implement security hardening and best practices for CyberArk infrastructure

Qualification

CyberArk architecturePrivileged Access ManagementIdentity governanceIntegration with enterprise systemsCyberArk APIsIAM frameworksSecurity complianceProject ManagementDevOps practicesProblem SolvingMentorshipDocumentation

Required

7+ years in identity and access management (IAM), with at least 5 years of hands-on experience with CyberArk
Deep knowledge of CyberArk architecture, provisioning, Safe policy management, PSM connectors, CPM, password rotation, and privileged access management
Design and deploy PSM connectors for various platforms including Windows, Unix/Linux, databases, and network devices
Strong experience integrating CyberArk solutions into enterprise environments (Active Directory, LDAP, Office 365, cloud apps)
Knowledge of IAM frameworks, security models, and access control principles (RBAC, ABAC, least privilege, segregation of duties)
Understanding of regulatory and compliance requirements related to IAM and privileged access
Experience with CyberArk, SailPoint, ServiceNow, Okta, Microsoft Azure AD, AWS IAM, and related IAM tools
Ability to manage multiple tasks, prioritize, and deliver on-time in a fast-paced, dynamic environment. Experience with agile methodologies is a plus
Strong analytical and troubleshooting skills for complex privileged access issues
Proficiency with CyberArk APIs (REST API, PACLI) for automation and integration
Bachelor's degree in Computer Science, Information Technology, Engineering, or a related field

Preferred

Experience with CyberArk SaaS/Privilege Cloud platform preferred
Certifications (Preferred): CyberArk Certified, CISSP, CISM, or other IAM-related certifications
Master's degree or relevant certifications is a plus
Experience with SailPoint and other IAM platforms
Experience with identity federation, single sign-on (SSO), and multi-factor authentication (MFA)
Familiarity with DevOps practices and CI/CD pipelines for IAM solutions

Benefits

Health and welfare benefits coverage options including medical, dental, vision, spending accounts, life insurance, voluntary plans
Participation in a 401(k) plan

Company

System One

twittertwittertwitter
company-logo
System One is a professional staffing firms.

H1B Sponsorship

System One has a track record of offering H1B sponsorships. Please note that this does not guarantee sponsorship for this specific role. Below presents additional info for your reference. (Data Powered by US Department of Labor)
Distribution of Different Job Fields Receiving Sponsorship
Represents job field similar to this job
Trends of Total Sponsorships
2025 (5)
2024 (6)
2023 (9)
2022 (10)
2021 (9)
2020 (5)

Funding

Current Stage
Late Stage
Total Funding
$301.8M
Key Investors
TruistOaktree Capital ManagementProspect Capital Corporation
2021-01-28Debt Financing· $290M
2020-12-08Private Equity
2016-09-20Acquired

Leadership Team

leader-logo
Troy Gregory
Chief Executive Officer
linkedin
leader-logo
Dan Moran
Chief Financial Officer
linkedin
Company data provided by crunchbase