Role : CyberArk PAM Engineer

Location: Brampton, ON – Hybrid (2–3 days in office)

Experience: 8–10 years overall; 3–6 years of hands-on CyberArk PAM experience.

Job Summary:

Seeking an experienced CyberArk PAM Engineer to design, implement, configure, and support enterprise privileged access management solutions, ensuring secure credential storage, password rotation, session monitoring, and compliance.

Key Responsibilities:

- Deploy and manage CyberArk components: PVWA, PSM, CPM, Vault, and AIM/CCP.
- Onboard privileged accounts, safes, platforms, and access policies.
- Integrate CyberArk with Windows/Linux servers, databases, network devices, cloud platforms, Active Directory, LDAP, and MFA.
- Configure PSM connectors, session recording, password rotation, and dual-control workflows.
- Troubleshoot vault access, password rotation,



session connectivity, and plugin issues.
- Enforce least-privilege access, zero-trust security, and compliance standards.
- Develop scripts, plugins, runbooks, and technical documentation.
- Collaborate with IAM, Security, Infrastructure, and DevOps teams.

Required Technical Skills:

- CyberArk PAM/PAS implementation and administration.
- PVWA, PSM, CPM, Vault, AIM/CCP.
- Privileged account management, secrets management, and credential rotation.
- Windows, Linux, Active Directory, LDAP, SSH, RDP, and TLS.
- Database password management and cloud integration (AWS, Azure, or GCP).
- Scripting with PowerShell or Bash; Python is preferred.

📌 CyberArk PAM Engineer (Brampton)
🏢 apptoza
📍 Brampton