About Cognizant Corporate
Cognizant Corporate is a global community united by a shared purpose: to make a meaningful impact. We are committed to excellence and driven by outcomes that matter. Collaboration is at the heart of how we work, and our forward-thinking mindset fuels continuous learning, innovation, and growth.
At Cognizant, careers transcend titles. We empower our people to think strategically, inspire others, and lead with purpose, always guided by our core values. Join us in shaping the future of business. Could you be the one to make a difference?
About the role
As a Senior CyberArk Engineer, you will drive impactful contributions by implementing, administering, supporting, and optimizing CyberArk Privileged Access Management solutions across on-premises, hybrid, and cloud environments. You will be a key member of the Identity Security team, collaborating with IAM, Cloud Engineering, Infrastructure, Application, Security Operations, Compliance, and CyberArk Engineering stakeholders.
You will have the autonomy to engineer secure privileged access solutions, support enterprise-scale PAM environments, onboard applications and cloud services, improve platform health, implement automation, and strengthen the secure management of privileged identities across the organization while upholding our commitment to quality and continuous learning.
In this role, you will:
- Configure, administer, maintain, and support CyberArk PAM solutions including Core PAS, Privilege Cloud, Conjur, CPM, PSM, PVWA, PTA, AAM, and related platform components.
- Perform platform operations and maintenance activities including upgrades, patching, health monitoring, capacity management, backup validation, troubleshooting, and service continuity support.
- Onboard privileged accounts, applications, databases, service accounts, cloud workloads, containers, infrastructure components, and enterprise platforms into CyberArk.
- Implement and maintain CyberArk integrations with Microsoft Azure, AWS, GCP, Entra ID, cloud-native services, ServiceNow, SailPoint, and enterprise applications.
- Develop automation, custom CPM and PSM plugins, technical documentation, operational runbooks, and process improvements to enhance privileged access governance and operational efficiency.
What you must have to be considered
- Bachelor’s degree in Computer Science, Information Technology, Cyber Security, or a related discipline.
- 6–9 years of Information Security experience with at least 3–5 years focused on CyberArk PAM engineering and administration.
- Hands-on experience deploying, administering, maintaining, and supporting CyberArk Privilege Cloud and/or self-hosted CyberArk environments.
- Strong expertise in CyberArk Core PAS, CPM, PSM, PVWA, PTA, AAM, Conjur, CyberArk Secrets Manager, and related CyberArk technologies.
- Experience implementing CyberArk onboarding, integrations, upgrades, platform maintenance, troubleshooting, and operational support activities.
- Experience supporting enterprise-scale privileged access management environments across on-premises, hybrid, and cloud platforms.
- Strong knowledge of privileged account onboarding, privileged access governance, entitlement reviews, access control principles, and lifecycle management.
- Experience integrating CyberArk with Active Directory, LDAP, Kerberos, MFA technologies, Entra ID, AWS IAM, GCP IAM, ServiceNow, SailPoint, and enterprise applications.
- Proficiency in PowerShell, Python, REST APIs, JSON, CyberArk APIs, and automation scripting.
- Experience developing and maintaining CPM and PSM plugins, custom connectors, and integrations for platforms, applications, network devices, and security appliances.
- Experience with Azure, AWS, GCP, Kubernetes, Docker, OpenShift, container security integrations, Terraform, CI/CD pipelines, and Infrastructure-as-Code practices.
- Understanding of security frameworks including ISO 27001, NIST, GDPR, and SOX.
- A strong sense of ownership, desire to create meaningful outcomes, and passion for work that serves a greater good for customers, communities, or global challenges.
- The embodiment of Cognizant’s Values of: Work as One, Dare to Innovate, Raise the Bar, Do The Right Thing, & Own It.
These will help you succeed
- CyberArk Certified Delivery Engineer certification.
- CyberArk Certified Sentry certification.
- CyberArk Defender Certification.
- Microsoft Azure Security Engineer Associate certification.
- AWS Security Specialty certification.
- Strong troubleshooting skills with the ability to analyze platform issues, service disruptions, privileged access incidents, and integration failures.
- Experience supporting secrets management, machine identity protection, application credential security, and cloud service onboarding.
- Strong engineering documentation, knowledge management, implementation guide, and operational procedure development skills.
- Ability to collaborate effectively with IAM, cloud, infrastructure, application, security operations, and compliance teams.
- Continuous learning mindset with interest in CyberArk, PAM, cloud security, automation, privileged access governance, and identity security technologies.
Work model - Hybrid
We strive to provide flexibility wherever possible. Based on this role’s business requirements, this position may require collaboration with global teams and participation in operational support activities as needed. Regardless of your working arrangement, we are here to support a healthy work-life balance through our various wellbeing programs.
About Cognizant:
Cognizant (Nasdaq: CTSH) is an AI Builder and technology services provider, bridging the gap between AI investment and enterprise value by building full-stack AI solutions for our clients. Our deep industry, process and engineering expertise enables us to build an organization’s unique context into technology systems that amplify human potential, drive tangible outcomes and keep global enterprises ahead in a fast-changing world. See how at cognizant.ai or @cognizant.
Additional employment information
Compensation information is accurate as of the date of this posting. Cognizant reserves the right to modify this information at any time, subject to applicable law.
Language requirements vary depending on roles, but we ask that all candidates have basic English proficiency for company-wide communications purposes. For roles based in Quebec, professional English proficiency is required, as you’ll deliver services to and collaborate with stakeholders outside the province who may not speak French.
Cognizant is an equal opportunity employer. Your application and candidacy will not be considered based on race, color, sex, religion, creed, sexual orientation, gender identity, national origin, disability, genetic information, pregnancy, veteran status or any other characteristic protected by federal, provincial or local laws.
If you have a disability that requires reasonable accommodation to search for a job opening or submit an application, please email [email protected] with your request and contact information.
