About the job Job Opportunity: L3 CyberArk PAM Operations Engineer 10583763
Job Opportunity: L3 CyberArk PAM Operations Engineer
Location: Amsterdam, Netherlands (TNDL)
Experience Level: 4–6 Years (Minimum 5 years specifically in CyberArk PAM)
Start Date: ASAP
Status: Open
Role Overview
We are looking for a highly skilled L3 Operations Engineer specializing in CyberArk Privileged Access Management (PAM). In this senior-level operational role, you will be responsible for the health, security, and optimization of our Core-PAS environment. You will lead complex onboarding projects, manage critical version upgrades, and act as the primary point of escalation for troubleshooting custom connectors and system failovers.
Key Responsibilities
- Core-PAS Administration: Maintain and optimize all CyberArk Core-PAS components, including the Vault, CPM, PSM, PSMP, CP, and CCP.
- Lifecycle Management: Lead component version upgrades and manage Disaster Recovery (DR) procedures, including hands-on execution of Failover and Failback processes.
- Advanced Onboarding: Manage the end-to-end onboarding process for privileged accounts across diverse platforms, including Windows, SSH/Unix, Databases, and Web applications.
- Tier-3 Support: Provide expert-level troubleshooting for existing custom connectors and complex system integration issues.
- Security Operations: Ensure the PAM solution aligns with Cyber Threat Intelligence and Microsoft IAM frameworks to maintain a robust security posture.
- Stakeholder Engagement: Act as a technical liaison between the security team and business stakeholders, ensuring clear communication and alignment on privileged access requirements.
Technical Requirements
Must-Have Qualifications
- Certification: Must be CyberArk Sentry or CDE (CyberArk Delivery Engineer) certified.
- Core Expertise: Minimum of 5 years of dedicated experience with CyberArk PAM (Core-PAS).
- Technical Breadth: Hands-on experience managing Vault, CPM, PSM, PSMP, CP, and CCP components.
- Operational Skills: Proven track record in executing DR drills, failovers, and environment upgrades.
- Platform Knowledge: Deep experience in onboarding and managing credentials for Windows, SSH, DB, and Web apps.
- Problem Solving: Strong debugging skills specifically related to custom connectors and PAM integrations.
Good-to-Have Skills
- Advanced Components: Hands-on experience with HTML5 Gateway and PTA (Privileged Threat Analytics).
- AAM Integration: Experience with CyberArk AAM (Application Access Manager) for secret management and service account onboarding.
- Automation: Proficiency in API-based automation for PAM tasks (a significant advantage).
- Identity Stack: Familiarity with Microsoft IAM and Apache Spark within a digital ecosystem.
Candidate Profile
- Experience: 4–6 years in Digital Security/Cybersecurity, with a heavy focus on L3 operations.
- Communication: Exceptional stakeholder engagement skills and the ability to explain complex technical risks in a clear, professional manner.
- Adaptability: Comfortable working in a high-stakes "ASAP" start environment within the vibrant Amsterdam tech hub.
Work Environment
Joining our Amsterdam team (TNDL), you will be part of a sophisticated digital operations unit. This role offers the opportunity to take ownership of a critical security platform and influence the way privileged access is managed across a diverse, modern infrastructure.