Assistant Manager - CyberArk Privileged Access Management (PAM)

KGS - CyberArk - Assistant Manager

Job Title: CyberArk PAM Assistant Manager

Overview: We are looking for an Assistant Manager for PAM to own end-to-end delivery of CyberArk PAM and Secrets programs across hybrid environments. The ideal candidate drives solution direction, manages complex stakeholder expectations, ensures delivery quality, and coaches team members while remaining technically hands-on for critical design and build decisions. CyberArk certification CDE-PAM/CDE-CPC is strongly preferred.

• Own delivery for medium-to-large CyberArk programs: scope, plan, RAID, dependencies, change control, and stakeholder communications.
• Drive delivery governance (phase gates/sprint cadence), quality reviews, and acceptance sign-offs.
• Lead cross-functional coordination with network, server, cloud, security operations, and application teams.
• Define hybrid architecture and implementation approach across environments (DEV/TEST/PROD), including HA/DR, sizing, logging/monitoring, and certificate strategy.
• Provide technical leadership for PAM core (Vault/PVWA/CPM/PSM/PSMP), ensuring best practices in hardening, privileged access policies, and auditability.
• Lead adoption and policy implementation for SIA/ SWS /SCA, aligning controls to business workflows and compliance requirements.
• Lead secrets management enablement using CyberArk Secrets Manager and Conjur; define enterprise patterns for apps, CI/CD, and Kubernetes/OpenShift.
• Own integrations with AD/LDAP, MFA/SSO, SIEM, ITSM, and cloud identity services; ensure end-to-end testing and production readiness.
• Drive automation strategy using REST APIs and PowerShell/Python to improve repeatability and reduce onboarding effort.
• Ensure operational handover readiness: runbooks, SOPs, monitoring/alerting, KT plans, and support model alignment.
• Coach and mentor consultants/engineers; conduct technical reviews and provide remediation guidance.
• Contribute to practice assets: templates, accelerators, reference architectures, and reusable onboarding libraries.
• Contribut to presales activities as needed: technical inputs, solution options, effort estimation, and risk identification.

• Bachelor’s degree in Computer Science / IT / Information Security (or equivalent practical experience).
• 7+ years in IAM/PAM/security engineering with 6+ years leading CyberArk implementations.
• Deep experience with CyberArk PAM core (Vault/PVWA/CPM/PSM/PSMP) including troubleshooting complex environments.
• Proven proficiency implementing SIA, SWS, and SCA (as applicable to scope).
• Strong experience implementing CyberArk Secrets Manager and Conjur, including enterprise patterns for CI/CD and Kubernetes/OpenShift.
• Strong hybrid infrastructure and cloud knowledge (Azure/AWS/GCP), including secure connectivity and identity integration.
• Strong delivery leadership, stakeholder management, documentation discipline, and communication skills.
• Scripting/automation using PowerShell/Python and REST APIs; familiarity with onboarding automation at scale.

Experience Level

Mid Level