Sr. CyberArk EPM / PAM Engineer

Job Description

We are

At Synechron, we believe in the power of digital to transform businesses for the better. Our global consulting firm combines creativity and innovative technology to deliver industry-leading digital solutions. Synechron’s progressive technologies and optimization strategies span end-to-end Artificial Intelligence, Consulting, Digital, Cloud & DevOps, Data, and Software Engineering, servicing an array of noteworthy financial services and technology firms. Through research and development initiatives in our FinLabs we develop solutions for modernization, from Artificial Intelligence and Blockchain to Data Science models, Digital Underwriting, mobile-first applications and more. Over the last 20+ years, our company has been honored with multiple employer awards, recognizing our commitment to our talented teams. With top clients to boast about, Synechron has a global workforce of 17,000+, and has 58 offices in 22 countries within key global markets.

Our challenge

We are seeking a highly experienced Senior CyberArk EPM / PAM Engineer to design, implement, operate, and continuously improve our enterprise privileged-access management program. This role will be responsible for CyberArk engineering, PAM architecture, privileged-account governance, least-privilege controls, platform integrations, and automation across Windows, Linux, on-premises, and cloud environments.

The ideal candidate has strong hands-on experience with CyberArk platforms and understands how privileged-access controls support security, audit, regulatory, and operational requirements within a financial-services environment .

Additional Information*

The base salary for this position will vary based on geography and other factors. In accordance with law, the base salary for this role if filled within New York is $130k - $140k/year & benefits (see below).

The Role

Responsibilities:

Design, implement, configure, and support CyberArk Privileged Access Management solutions across the enterprise.

• Engineer and administer CyberArk components, including as applicable:Enterprise Password Vault (EPV)
• Central Policy Manager (CPM)
• Privileged Session Manager (PSM)
• PSM for SSH (PSMP)
• Privileged Threat Analytics (PTA)
• Central Credential Provider (CCP)
• CyberArk Endpoint Privilege Manager (EPM)

Develop and maintain PAM architecture, standards, operating procedures, and technical roadmaps.

• Establish and enforce privileged-access governance, including:Privileged -account onboarding and discovery
• Ownership and accountability
• Access approvals
• Credential rotation
• Session monitoring and recording
• Access reviews and recertification
• Account decommissioning

Implement least-privilege policies for endpoints, servers, applications, service accounts, and administrative users.

Manage the full privileged-account lifecycle from discovery and onboarding through modification, review, and retirement.

Configure and maintain CyberArk integrations with Active Directory, LDAP, DNS, SIEM, ITSM, identity platforms, vulnerability-management tools, and other enterprise systems.

Support privileged access across Windows and Linux/Unix environments.

Develop secure solutions for application, database, service, robotic, and non-human account credential management.

Build and maintain automation using PowerShell, Python, REST APIs, and CyberArk APIs.

Integrate CyberArk with enterprise applications and cloud platforms, including AWS and Azure where applicable.

Troubleshoot platform, connectivity, authentication, credential-management, session-management, and policy issues.

Monitor platform health, capacity, availability, performance, and security events.

Support incident response, audit requests, vulnerability remediation, disaster recovery, and business-continuity activities.

Collaborate with Cybersecurity, Infrastructure, Cloud, IAM, DevOps, Application, Risk, Compliance, and Audit teams.

Produce technical documentation, runbooks, diagrams, configuration standards, and operational metrics.

• Contribute to continuous improvement of PAM controls in alignment with financial-services regulatory and security requirements.

Required Qualifications

Strong hands-on experience engineering and administering CyberArk PAM and/or EPM solutions in an enterprise environment.

Demonstrated experience with PAM architecture, privileged-access governance, and security control design.

Strong understanding of least privilege, privilege elevation, application control, and privileged-account lifecycle management.

Experience integrating CyberArk with enterprise technologies and security platforms.

Solid knowledge of both Windows and Linux operating environments.

Experience with Active Directory and LDAP integration, authentication, group policy, service accounts, and privileged groups.

• Experience with automation and integration using:PowerShell
• Python
• REST APIs
• CyberArk APIs or SDKs

Ability to troubleshoot complex technical issues across identity, operating systems, networking, applications, and security tooling.

Experience working within structured change-management, incident-management, and service-management processes.

Strong understanding of security principles, access controls, credential protection, and operational risk.

Excellent written and verbal communication skills.

Ability to work effectively with technical teams, business stakeholders, auditors, and risk partners.

We offer:

• A highly competitive compensation and benefits package.
• A multinational organization with 58 offices in 22 countries and the possibility to work abroad.
• 10 days of paid annual leave (plus sick leave and national holidays).
• Maternity & paternity leave plans.
• A comprehensive insurance plan including medical, dental, vision, life insurance, and long-/short-term disability (plans vary by region).
• Retirement savings plans.
• A higher education certification policy.
• Commuter benefits (varies by region).
• Extensive training opportunities, focused on skills, substantive knowledge, and personal development.
• On-demand Udemy for Business for all Synechron employees with free access to more than 5000 curated courses.
• Coaching opportunities with experienced colleagues from our Financial Innovation Labs (FinLabs) and Center of Excellences (CoE) groups.
• Cutting edge projects at the world’s leading tier-one banks, financial institutions and insurance firms.
• A flat and approachable organization.
• A truly diverse, fun-loving, and global work culture.

S YNECHRON’S DIVERSITY & INCLUSION STATEMENT

Diversity & Inclusion are fundamental to our culture, and Synechron is proud to be an equal opportunity workplace and is an affirmative action employer. Our Diversity, Equity, and Inclusion (DEI) initiative ‘Same Difference’ is committed to fostering an inclusive culture – promoting equality, diversity and an environment that is respectful to all. We strongly believe that a diverse workforce helps build stronger, successful businesses as a global company. We encourage applicants from across diverse backgrounds, race, ethnicities, religion, age, marital status, gender, sexual orientations, or disabilities to apply. We empower our global workforce by offering flexible workplace arrangements, mentoring, internal mobility, learning and development programs, and more.

All employment decisions at Synechron are based on business needs, job requirements and individual qualifications, without regard to the applicant’s gender, gender identity, sexual orientation, race, ethnicity, disabled or veteran status, or any other characteristic protected by law.