Lead IAM Engineer

We are seeking a Lead IAM Engineer to help architect, deploy, and run secure identity and privileged access services that align with business needs in a cloud environment. You will guide security direction, improve processes, and ensure resilient delivery at scale.

Responsibilities

• Design IAM and PAM security architectures and strategies to protect information system resources and assets
• Architect, deploy, and operate CyberArk platforms, including EPV, PSM/PSMP, and EPM
• Ensure security technologies integrate with information security policies, standards, and business objectives
• Provide operational support for critical security infrastructure components to maintain availability and resiliency
• Assess the threat landscape and adapt controls to reduce risk in a cloud computing environment
• Identify opportunities to improve security processes and implement enhancements
• Mentor team members and associates on security best practices and operational rigor
• Troubleshoot complex IAM/PAM issues using tracing, logging, and real-time diagnostics
• Define and maintain security policies and access controls to support business direction
• Maintain awareness of security technology trends, direction, and related issues

Requirements

• 5+ years of Privileged Access Management (PAM) experience, including CyberArk EPV and CyberArk PSM/PSMP deployment and support
• Experience leading security initiatives with minimal daily oversight and strong ownership
• Experience developing long-term strategy for supported security systems
• Strong CyberArk EPM design, deployment, and support experience
• Strong troubleshooting skills, including tracing, logging, and real-time issue resolution
• Working knowledge of Active Directory (AD) or LDAP directory services
• Advanced English proficiency (C1)

Nice to have

• Experience deploying and supporting HashiCorp Vault
• Experience deploying and supporting BeyondTrust PowerBroker
• Endpoint privilege management experience
• Coding and scripting ability to update or troubleshoot integrations and automation