Privileged Access Management (PAM) Engineer | Valencia

Location:

Valencia, Spain Work model:

on-site Valencia office Experience:

4 to 8+ years in PAM, IAM, or IT Security Engineering ⏱️

Position:

Full-time Contract:

B2B / Freelance Languages:

English & Spanish

Summary: We’re looking for a

PAM Engineer

to deploy, administer, and manage enterprise

Privileged Access Management (PAM)

solutions across on-premises and cloud environments. You’ll focus on

CyberArk , privileged account onboarding, secrets management, Just-in-Time (JIT) access, automation, and governance, ensuring secure management of privileged identities and compliance with security standards.

Key Responsibilities: Install, configure, and maintain CyberArk

components including

Vault, PVWA, CPM, PSM, PTA, and Conjur Perform

privileged account onboarding

across

Windows, Linux, Oracle, SQL, cloud, and application environments , ensuring secure vaulting and proper classification Manage the

end-to-end privileged account lifecycle , including inventory, validation, ownership mapping, approvals, and onboarding Implement and manage

Just-in-Time (JIT) privileged access

and

session management controls Enforce

password and credential management policies , including automated

password rotation , complexity enforcement, and secure credential storage Manage

application secrets

using

CyberArk Conjur

or equivalent

secrets management solutions Identify and manage

service accounts, shared accounts, and non-rotating accounts , applying appropriate security controls and risk mitigation Monitor

password compliance

and remediate accounts that do not meet defined

rotation and policy standards Provide

Level 2/3 support

for





PAM-related incidents and service requests Troubleshoot

CyberArk integrations

with

Active Directory, Entra ID (Azure AD), IAM, SIEM, and ServiceNow Perform regular

health checks, system monitoring, patching, and upgrades

of CyberArk infrastructure Automate

PAM processes

using

PowerShell, Python, REST APIs, and psPAS

to reduce manual effort Support

bulk onboarding

and

large-scale privileged account management

through automation and standardized methods Design and support integrations between

PAM and enterprise IAM systems

such as

SailPoint, Saviynt, and Entra ID Maintain

SOPs, onboarding procedures, runbooks, and automation scripts Collaborate with

application, infrastructure, and cloud teams

to enforce

least privilege

and secure credential usage Participate in

audit and compliance activities , providing evidence, reporting, and demonstrating

control effectiveness Support

PAM governance activities , including

account recertification, ownership validation, and compliance monitoring

Required Skills: Bachelor’s degree

in

Computer Science, Information Security , or related field 4–8 years of experience

in

IT Security, IAM, or PAM Engineering Strong hands-on experience with

CyberArk PAM Suite

( Vault, CPM, PSM, PVWA ) Experience with

CyberArk Conjur

or other

enterprise secrets management





solutions Strong understanding of

Just-in-Time (JIT) access

and

Privileged Session Management Experience integrating

PAM

with

IAM platforms

(e.g.,

SailPoint, Saviynt, Entra ID / Azure AD ) Experience managing

privileged access in cloud environments

( Azure, AWS ) Strong understanding of

Windows, Linux, Active Directory , and

database systems

( Oracle, SQL ) Strong

scripting and automation

experience ( PowerShell, Python, REST APIs ) Experience with

ITSM tools

such as

ServiceNow

and

incident/change management

processes Knowledge of

security controls, audit frameworks , and

compliance standards Strong

analytical and troubleshooting

abilities Ability to work independently and within

cross-functional teams Excellent

communication skills

with both technical and non-technical stakeholders Attention to detail

and commitment to

security best practices

Nice to Have : CyberArk Defender / Sentry certification Experience implementing Conjur in DevOps / CI-CD environments Experience with Privileged Threat Analytics (PTA) or advanced monitoring tools Exposure to container platforms (Kubernetes, OpenShift) and secrets management Familiarity with Zero Trust security architecture

If you're passionate about

CyberArk, Privileged Access Management, automation, and enterprise security , we'd love to hear from you.

Send your

CV in English

to

[email protected]

with reference

“MA/PAM”

or just

apply

to this opportunity.

#CyberArk #PAM #IAM #PrivilegedAccessManagement #CyberSecurity #InformationSecurity #CloudSecurity #EntraID #ZeroTrust #Hiring

📌 Privileged Access Management (PAM) Engineer (Valencia)
🏢 Optiwisers
📍 Valencia