Identity Engineer - Privilege Access

About the role

The Identity Engineer is responsible for administering, securing, and supporting the enterprise's privileged access management (PAM) and non-human identity (NHI) environment, with a primary focus on CyberArk Privileged Cloud and the lifecycle governance of service accounts, API keys, certificates, and machine/workload identities.

What you'll do

• Administer and support the CyberArk Privileged Cloud platform , including user and group management, safe management, vault configuration, and PSM/CPM operations
• Configure and enforce password, access, and workflow policies to manage privileged account onboarding, rotation, and least-privilege access
• Own non-human identity (NHI) management end to end, including service accounts, API keys, secrets, certificates, and machine/workload identities
• Implement NHI lifecycle governance , including discovery, ownership assignment, credential rotation, expiration tracking
• Administer secrets management and vaulting for applications, automation, and CI/CD pipelines, reducing hard-coded credentials and standing privileged access

What you need

• 10–18 yrs of experience
• SIEM
• Incident response
• IAM
• ISO 27001
• Firewalls
• Python
• Any graduate

Good to have

• CISSP
• CISM
• CI/CD
• Active Directory
• REST APIs
• SOX