Privileged Access Management (PAM) Engineer | Valencia

Asegúrese de leer la descripción completa a continuación y, si confía en que cumple todos los requisitos, envíe su solicitud de inmediato.

Work model: on-site Valencia office

Experience: 4 to 8+ years in PAM, IAM, or IT Security Engineering

Summary

We’re looking for a PAM Engineer to deploy, administer, and manage enterprise Privileged Access Management (PAM) solutions across on-premises and cloud environments. You’ll focus on CyberArk , privileged account onboarding, secrets management, Just-in-Time (JIT) access, automation, and governance, ensuring secure management of privileged identities and compliance with security standards.

Key Responsibilities

-

- Install, configure, and maintain CyberArk components including Vault, PVWA, CPM, PSM, PTA, and Conjur

- Perform privileged account onboarding across Windows, Linux, Oracle, SQL, cloud, and application environments , ensuring secure vaulting and proper classification

- Manage the end-to-end privileged account lifecycle , including inventory, validation, ownership mapping, approvals, and onboarding

- Implement and manage Just-in-Time (JIT) privileged access and session management controls

- Enforce password and credential management policies , including automated password rotation , complexity enforcement, and secure credential storage

- Manage application secrets using CyberArk Conjur or equivalent secrets management solutions

- Identify and manage service accounts, shared accounts, and non-rotating accounts , applying appropriate security controls and risk mitigation





- Monitor password compliance and remediate accounts that do not meet defined rotation and policy standards

- Provide Level 2/3 support for PAM-related incidents and service requests

- Troubleshoot CyberArk integrations with Active Directory, Entra ID (Azure AD), IAM, SIEM, and ServiceNow

- Perform regular health checks, system monitoring, patching, and upgrades of CyberArk infrastructure

- Automate PAM processes using PowerShell, Python, REST APIs, and psPAS to reduce manual effort

- Support bulk onboarding and large-scale privileged account management through automation and standardized methods

- Design and support integrations between PAM and enterprise IAM systems such as SailPoint, Saviynt, and Entra ID

- Maintain SOPs, onboarding procedures, runbooks, and automation scripts

- Collaborate with application, infrastructure, and cloud teams to enforce least privilege and secure credential usage

- Participate in audit and compliance activities , providing evidence, reporting, and demonstrating control effectiveness

- Support PAM governance activities , including account recertification, ownership validation, and compliance monitoring

Required Skills

-

- Bachelor’s degree in Computer Science, Information Security , or related field

- 4–8 years of experience in IT Security, IAM, or PAM Engineering





- Strong hands‑on experience with CyberArk PAM Suite (Vault, CPM, PSM, PVWA )

- Experience with CyberArk Conjur or other enterprise secrets management solutions

- Strong understanding of Just-in-Time (JIT) access and Privileged Session Management

- Experience integrating PAM with IAM platforms (e.g., SailPoint, Saviynt, Entra ID / Azure AD )

- Experience managing privileged access in cloud environments (Azure, AWS )

- Strong understanding of Windows, Linux, Active Directory xqbhyrx , and database systems (Oracle, SQL )

- Strong scripting and automation experience (PowerShell, Python, REST APIs )

- Experience with ITSM tools such as ServiceNow and incident/change management processes

- Knowledge of security controls, audit frameworks , and compliance standards

- Strong analytical and troubleshooting abilities

- Ability to work independently and within cross‑functional teams

- Excellent communication skills with both technical and non‑technical stakeholders

- Attention to detail and commitment to security best practices

Nice to Have

-

- CyberArk Defender / Sentry certification

- Experience implementing Conjur in DevOps / CI‑CD environments

- Experience with Privileged Threat Analytics (PTA) or advanced monitoring tools

- Exposure to container platforms (Kubernetes, OpenShift) and secrets management

- Familiarity with Zero Trust security architecture

If you're passionate about CyberArk, Privileged Access Management, automation, and enterprise security , we'd love to hear from you.

#J-18808-Ljbffr

📌 Privileged Access Management (PAM) Engineer (Valencia)
🏢 Optiwisers
📍 Valencia