CyberArk PAM Expert

Randstad Digital Talent Services, a specialized division of Randstad dedicated to recruiting high-caliber IT and technology professionals, is partnering with a premier IT consulting and system integration firm to hire a:

CyberArk PAM Expert

Role Overview

Working 100% remotely within an enterprise-scale, multicultural environment, the CyberArk PAM Expert will serve as a senior technical authority within a strategic international cybersecurity program for a Tier-1 Banking & Insurance group.

In this role, you will take end-to-end ownership of the enterprise Privileged Access Management posture—driving advanced platform architecture, complex multi-tier integrations, automation frameworks, and privileged access governance across hybrid and multi-cloud environments.

Key Responsibilities

• Enterprise Architecture & Implementation: Lead the architectural design, deployment, hardening, and high-availability configuration of the enterprise CyberArk PAM ecosystem (Vault clusters, Disaster Recovery, CPM, PVWA, PSM/PSMP, and Secure Web Sessions).
• Advanced Integration & Onboarding: Design and execute complex onboarding strategies for critical banking assets, legacy core systems, databases, cloud platforms (AWS, Azure), and CI/CD pipelines.
• Automation & Orchestration: Develop and maintain robust automation frameworks using CyberArk REST APIs and scripting (PowerShell, Python) to automate account lifecycle management, policy enforcement, and operational tasks.
• Secrets Management & Modern Workloads: Support and integrate secrets management capabilities (such as CyberArk Conjur / Secrets Hub) for non-human identities, DevOps pipelines, and containerized workloads.
• Level-3 Support & Incident Escalation: Act as the ultimate technical escalation point for critical platform incidents, performance tuning, version upgrades, security patches, and vault failover scenarios.
• Technical Leadership & Governance: Collaborate directly with CISOs, Cloud Architects, and Audit teams to define enterprise PAM standards, zero-trust policies, and regulatory compliance frameworks (PCI-DSS, DORA, ISO 27001).
• Mentorship: Provide technical guidance, best practices, and architectural oversight to internal engineering teams and cross-functional project stakeholders.

Requirements

• Proven CyberArk Mastery: Substantial, hands-on experience designing, implementing, and administering enterprise-scale CyberArk Core PAS infrastructures.
• Complex Integration Track Record: Demonstrated success integrating CyberArk with complex heterogeneous environments: Active Directory multi-forest architectures, LDAP, MFA/IdP solutions, SIEM/SOAR (Splunk, QRadar), and ITSM tools (ServiceNow).
• Scripting & API Automation: Advanced proficiency in CyberArk REST API scripting (PowerShell, Python, or Bash) for automated bulk onboarding, reporting, and health monitoring.
• Systems & Network Foundation: Deep understanding of OS internals (Windows Server, Linux/Unix), network security, secure protocols (SSH, RDP, TLS/SSL, Kerberos), and database access models.
• Enterprise Security & Governance: Strong command of Zero Trust architecture, Least Privilege principles, and compliance standards within highly regulated financial environments.
• Soft Skills & Autonomy: High degree of autonomy in technical decision-making, excellent problem-solving skills under SLA-driven enterprise environments, and strong stakeholder management abilities.
• Language Proficiency: Fluent professional English (C1 minimum, written and spoken) for daily technical leadership, cross-border team collaboration, and executive reporting.
• Certifications (Strongly Preferred): CyberArk Certified Sentry, Guardian, or CDE (Certified Delivery Engineer).

Compensation & Benefits

• Work Arrangement: 100% Full Remote (maximum organizational flexibility);
• Employment Type: Full-time, permanent contract under CCNL Commercio (13 installments);
• Salary Range (RAL): Commensurate with demonstrated technical proficiency up to €50,000;
• Professional Growth: Direct exposure to a high-complexity international banking environment with concrete career advancement paths in Cyber Security, Zero Trust Architecture, and Identity Governance.

"This announcement is open to candidates of all genders (pursuant to Italian Law 903/77 and 125/91) and individuals of all ages and nationalities (Legislative Decree 215/03 and 216/03). Please submit your resume with authorization for the processing of personal data (GDPR EU 2016/679)."