Privileged Access Management (PAM) Engineer | Valencia
¿No sabe con seguridad qué habilidades necesitará para esta ocasión? Simplemente lea la descripción completa a continuación para obtener una idea clara de los requisitos del candidato.
Location:
Valencia, Spain
Work model:
on-site Valencia office
Experience:
4 to 8+ years in PAM, IAM, or IT Security Engineering

Position:
Full-time
Contract:
B2B / Freelance
Languages:
English & Spanish
Summary:
We’re looking for a
PAM Engineer
to deploy, administer, and manage enterprise
Privileged Access Management (PAM)
solutions across on-premises and cloud environments. You’ll focus on
CyberArk , privileged account onboarding, secrets management, Just-in-Time (JIT) access, automation, and governance, ensuring secure management of privileged identities and compliance with security standards.
Key Responsibilities:
Install, configure, and maintain CyberArk
components including
Vault, PVWA, CPM, PSM, PTA, and Conjur
Perform
privileged account onboarding
across
Windows, Linux, Oracle, SQL, cloud, and application environments , ensuring secure vaulting and proper classification
Manage the
end-to-end privileged account lifecycle , including inventory, validation, ownership mapping, approvals, and onboarding
Implement and manage
Just-in-Time (JIT) privileged access
and
session management controls
Enforce
password and credential management policies , including automated
password rotation , complexity enforcement, and secure credential storage
Manage
application secrets
using
CyberArk Conjur
or equivalent
secrets management solutions
Identify and manage
service accounts, shared accounts, and non-rotating accounts , applying appropriate security controls and risk mitigation
Monitor




password compliance
and remediate accounts that do not meet defined
rotation and policy standards
Provide
Level 2/3 support
for
PAM-related incidents and service requests
Troubleshoot
CyberArk integrations
with
Active Directory, Entra ID (Azure AD), IAM, SIEM, and ServiceNow
Perform regular
health checks, system monitoring, patching, and upgrades
of CyberArk infrastructure
Automate
PAM processes
using
PowerShell, Python, REST APIs, and psPAS
to reduce manual effort
Support
bulk onboarding
and
large-scale privileged account management
through automation and standardized methods
Design and support integrations between
PAM and enterprise IAM systems
such as
SailPoint, Saviynt, and Entra ID
Maintain
SOPs, onboarding procedures, runbooks, and automation scripts
Collaborate with
application, infrastructure, and cloud teams
to enforce
least privilege
and secure credential usage
Participate in
audit and compliance activities , providing evidence, reporting, and demonstrating
control effectiveness
Support
PAM governance activities , including
account recertification, ownership validation, and compliance monitoring
Required Skills:
Bachelor’s degree
in
Computer Science, Information Security , or related field
4–8 years of experience
in
IT Security, IAM, or PAM Engineering
Strong hands-on experience with
CyberArk PAM Suite
( Vault, CPM, PSM, PVWA )




Experience with
CyberArk Conjur
or other
enterprise secrets management
solutions
Strong understanding of
Just-in-Time (JIT) access
and
Privileged Session Management
Experience integrating
PAM
with
IAM platforms
(e. xqbhyrx g.,
SailPoint, Saviynt, Entra ID / Azure AD )
Experience managing
privileged access in cloud environments
( Azure, AWS )
Strong understanding of
Windows, Linux, Active Directory , and
database systems
( Oracle, SQL )
Strong
scripting and automation
experience ( PowerShell, Python, REST APIs )
Experience with
ITSM tools
such as
ServiceNow
and
incident/change management
processes
Knowledge of
security controls, audit frameworks , and
compliance standards
Strong
analytical and troubleshooting
abilities
Ability to work independently and within
cross-functional teams
Excellent
communication skills
with both technical and non-technical stakeholders
Attention to detail
and commitment to
security best practices
Nice to Have :
CyberArk Defender / Sentry certification
Experience implementing Conjur in DevOps / CI-CD environments
Experience with Privileged Threat Analytics (PTA) or advanced monitoring tools
Exposure to container platforms (Kubernetes, OpenShift) and secrets management
Familiarity with Zero Trust security architecture
If youre passionate about
CyberArk, Privileged Access Management, automation, and enterprise security , wed love to hear from you.
Send your
CV in English
to
with reference
“MA/PAM”
or just
apply
to this opportunity.
#CyberArk #PAM #IAM #PrivilegedAccessManagement #CyberSecurity #InformationSecurity #CloudSecurity #EntraID #ZeroTrust #Hiring

📌 Privileged Access Management (PAM) Engineer (Valencia)
🏢 Optiwisers
📍 Valencia