CyberArk PAM Engineer

Brampton, ON
Hybrid
Posted Oct 17, 2026
1 position

Opens LinkedIn

Employment type: Contract
Experience level: Senior · 5+ years
Posting language: English
Working hours: 40 hours per week
Office presence: 3 days per week
Seniority: Mid-Senior level
Application method: Direct apply is available

Job summary

Design, implement, configure, and support CyberArk privileged access management solutions, including account onboarding, password rotation, session monitoring, and integrations with enterprise systems. Troubleshoot CyberArk components and access issues, enforce least-privilege and compliance controls, and develop scripts, plugins, runbooks, and technical documentation in collaboration with related teams.

Job details

Role : CyberArk PAM Engineer Location: Brampton, ON – Hybrid (2–3 days in office) Experience: 8–10 years overall; 3–6 years of hands-on CyberArk PAM experience. Job Summary: Seeking an experienced CyberArk PAM Engineer to design, implement, configure, and support enterprise privileged access management solutions, ensuring secure credential storage, password rotation, session monitoring, and compliance. Key Responsibilities: Deploy and manage CyberArk components: PVWA, PSM, CPM, Vault, and AIM/CCP. Onboard privileged accounts, safes, platforms, and access policies. Integrate CyberArk with Windows/Linux servers, databases, network devices, cloud platforms, Active Directory, LDAP, and MFA. Configure PSM connectors, session recording, password rotation, and dual-control workflows. Troubleshoot vault access, password rotation, session connectivity, and plugin issues. Enforce least-privilege access, zero-trust security, and compliance standards. Develop scripts, plugins, runbooks, and technical documentation. Collaborate with IAM, Security, Infrastructure, and DevOps teams. Required Technical Skills: CyberArk PAM/PAS implementation and administration. PVWA, PSM, CPM, Vault, AIM/CCP. Privileged account management, secrets management, and credential rotation. Windows, Linux, Active Directory, LDAP, SSH, RDP, and TLS. Database password management and cloud integration (AWS, Azure, or GCP). Scripting with PowerShell or Bash; Python is preferred.

What you’ll do

Requirements

Requires 8–10 years of overall experience, including 3–6 years of hands-on CyberArk PAM experience. Candidates should have CyberArk implementation and administration expertise, knowledge of Windows and Linux environments and enterprise integrations, and scripting skills in PowerShell or Bash; Python is preferred.