Job Position
CyberArk Secret Management Engineer
Job Description Summary
We are seeking a experienced CyberArk Engineer with strong expertise in CyberArk Secret Management (SaaS and self-hosted) mainly SaaS. The role involves designing, implementing, and optimizing enterprise-grade secret management solutions for clients.
Job Description
Key Responsibilities:
- Design and implement CyberArk Secret Management solutions, including:
- CyberArk SaaS-based Secret Management
- Self-hosted solutions such as AAM / CCP
- Lead end-to-end deployment and integration of:
- Central Credential Provider (CCP)
- Application Access Manager (AAM)
- SaaS-based secrets management for cloud-native and modern applications
- Integrate CyberArk with:
- Enterprise applications (on-premises and cloud)
- DevOps pipelines (CI/CD)
- Containerized and microservices environments
- Define and enforce secrets lifecycle management (storage, rotation, access control, auditing)
- Provide technical design, architecture guidance, and best practices
- Perform advanced troubleshooting and optimization
- Ensure compliance with audit, regulatory, and security standards
Required Skills & Experience:
- Strong hands-on experience with:
- CyberArk Secret Management (SaaS solutions)
- CyberArk AAM / CCP (self-hosted Secret Management)
- Mandatory:
- Hands-on experience in designing and building at least 1 CyberArk Secret Management (SaaS) deployments within the past 1 year
- CyberArk certifications (Defender, Sentry, CDE, Guardian)
- Proven experience in:
- End-to-end CyberArk solution design and implementation
- Deep understanding of:
- Secrets management architecture and best practices
- Secure application authentication (API, tokens, certificates)
- IAM and least privilege principles
- Experience integrating CyberArk with:
- Applications and middleware
- DevOps tools (e.g., Jenkins, Ansible, Kubernetes, etc.)
- Strong knowledge of:
- Windows and Linux platforms
- Networking and enterprise security fundamentals
- Ability to work independently and lead technical delivery
Good to Have:
- CyberArk PAM (SaaS and Self-Hosted) knowledge (Vault, PVWA, CPM, PSM)
- Experience in CyberArk upgrades or migrations
- Exposure to cloud platforms (Azure, AWS, GCP)
- Scripting skills (PowerShell, Python, REST API)
Key Requirements:
- Senior-level engineer with recent and proven SaaS Secret Management delivery experience
- Able to work independently with minimal supervision
- Strong stakeholder communication and solutioning capability
