About Cognizant Corporate
Cognizant Corporate is a global community united by a shared purpose: to make a meaningful impact. We are committed to excellence and driven by outcomes that matter. Collaboration is at the heart of how we work, and our forward-thinking mindset fuels continuous learning, innovation, and growth.
At Cognizant, careers transcend titles. We empower our people to think strategically, inspire others, and lead with purpose, always guided by our core values. Join us in shaping the future of business. Could you be the one to make a difference?
About the role
As a Senior CyberArk Engineer, you will drive impactful contributions by implementing, administering, supporting, and optimizing CyberArk Privileged Access Management solutions across on-premises, hybrid, and cloud environments. You will be a key member of the Identity Security team, collaborating with IAM, Cloud Engineering, Infrastructure, Application, Security Operations, Compliance, and CyberArk Engineering stakeholders.
You will have the autonomy to engineer secure privileged access solutions, support enterprise-scale PAM environments, onboard applications and cloud services, improve platform health, implement automation, and strengthen the secure management of privileged identities across the organization while upholding our commitment to quality and continuous learning.
In this role, you will:
- Configure, administer, maintain, and support CyberArk PAM solutions including Core PAS, Privilege Cloud, Conjur, CPM, PSM, PVWA, PTA, AAM, and related platform components.
- Perform platform operations and maintenance activities including upgrades, patching, health monitoring, capacity management, backup validation, troubleshooting, and service continuity support.
- Onboard privileged accounts, applications, databases, service accounts, cloud workloads, containers, infrastructure components, and enterprise platforms into CyberArk.
- Implement and maintain CyberArk integrations with Microsoft Azure, AWS, GCP, Entra ID, cloud-native services, ServiceNow, SailPoint, and enterprise applications.
- Develop automation, custom CPM and PSM plugins, technical documentation, operational runbooks, and process improvements to enhance privileged access governance and operational efficiency.
What you must have to be considered
- Bachelor’s degree in Computer Science, Information Technology, Cyber Security, or a related discipline.
- 6–9 years of Information Security experience with at least 3–5 years focused on CyberArk PAM engineering and administration.
- Hands-on experience deploying, administering, maintaining, and supporting CyberArk Privilege Cloud and/or self-hosted CyberArk environments.
- Strong expertise in CyberArk Core PAS, CPM, PSM, PVWA, PTA, AAM, Conjur, CyberArk Secrets Manager, and related CyberArk technologies.
- Experience implementing CyberArk onboarding, integrations, upgrades, platform maintenance, troubleshooting, and operational support activities.
- Experience supporting enterprise-scale privileged access management environments across on-premises, hybrid, and cloud platforms.
- Strong knowledge of privileged account onboarding, privileged access governance, entitlement reviews, access control principles, and lifecycle management.
- Experience integrating CyberArk with Active Directory, LDAP, Kerberos, MFA technologies, Entra ID, AWS IAM, GCP IAM, ServiceNow, SailPoint, and enterprise applications.
- Proficiency in PowerShell, Python, REST APIs, JSON, CyberArk APIs, and automation scripting.
- Experience developing and maintaining CPM and PSM plugins, custom connectors, and integrations for platforms, applications, network devices, and security appliances.
- Experience with Azure, AWS, GCP, Kubernetes, Docker, OpenShift, container security integrations, Terraform, CI/CD pipelines, and Infrastructure-as-Code practices.
- Understanding of security frameworks including ISO 27001, NIST, GDPR, and SOX.
- A strong sense of ownership, desire to create meaningful outcomes, and passion for work that serves a greater good for customers, communities, or global challenges.
- The embodiment of Cognizant’s Values of: Work as One, Dare to Innovate, Raise the Bar, Do The Right Thing, & Own It.
These will help you succeed
- CyberArk Certified Delivery Engineer certification.
- CyberArk Certified Sentry certification.
- CyberArk Defender Certification.
- Microsoft Azure Security Engineer Associate certification.
- AWS Security Specialty certification.
- Strong troubleshooting skills with the ability to analyze platform issues, service disruptions, privileged access incidents, and integration failures.
- Experience supporting secrets management, machine identity protection, application credential security, and cloud service onboarding.
- Strong engineering documentation, knowledge management, implementation guide, and operational procedure development skills.
- Ability to collaborate effectively with IAM, cloud, infrastructure, application, security operations, and compliance teams.
- Continuous learning mindset with interest in CyberArk, PAM, cloud security, automation, privileged access governance, and identity security technologies.
Work model - Hybrid
We strive to provide flexibility wherever possible. Based on this role’s business requirements, this position may require collaboration with global teams and participation in operational support activities as needed. Regardless of your working arrangement, we are here to support a healthy work-life balance through our various wellbeing programs.
Over Cognizant
Cognizant (NASDAQ: CTSH) is een bouwer van AI-oplossingen en een leverancier van technologiediensten. Wij slaan de brug tussen AI-investeringen en ondernemingswaarde door het bouwen van full-stack AI-oplossingen voor onze klanten. Onze diepgaande kennis van sectoren, processen en engineering stelt ons in staat om de unieke context van een organisatie te verankeren in technologische systemen. Deze systemen versterken het menselijk potentieel, realiseren tastbare resultaten en geven wereldwijde ondernemingen een voorsprong in een snel veranderende wereld. Ontdek hoe op cognizant.ai of @cognizant.
Aanvullende arbeidsinformatie
De informatie over de beloning is correct op de datum van deze vacature. Cognizant behoudt zich het recht voor om deze informatie op elk moment te wijzigen, met inachtneming van de toepasselijke wetgeving.
Van sollicitanten kan worden verwacht dat zij gesprekken bijwonen, persoonlijk of via een videogesprek. Daarnaast kan van kandidaten worden gevraagd om tijdens elk gesprek een geldig, door de overheid uitgegeven identiteitsbewijs (zoals een identiteitskaart of paspoort) te tonen.
Cognizant is een werkgever die gelijke kansen biedt. Je sollicitatie en kandidatuur worden niet beoordeeld op basis van ras, huidskleur, geslacht, religie, levensovertuiging, seksuele geaardheid, genderidentiteit, nationale afkomst, handicap, genetische informatie, zwangerschap, veteranenstatus of enige andere eigenschap die wordt beschermd door federale, regionale of lokale wetgeving.
