Principal Balkans Hybrid Wiser Technology designs, builds, and scales complex software systems that power real-world impact. With 500+ engineers and over 25 years of experience in mission-critical environments, we help global organizations turn ambitious ideas into working solutions. Across Europe, MENA, and North America, we combine deep engineering expertise with AI and data to support leading companies in aerospace & defense, automotive, telecom & media, IT, and financial services. WHAT YOU WILL DO: Design, implement, and own enterprise Privileged Access Management (PAM) architecture and operations centered on CyberArk , delivering secure, scalable controls for human and non-human privileged identities across cloud, hybrid, and on-prem environments. Advise Security Architecture, IAM, Platform Engineering, and Infrastructure teams on privileged access design patterns, onboarding strategy, and risk reduction—translating policy and compliance requirements into enforceable technical controls. Lead hands-on deployment and configuration of core CyberArk capabilities (e.g., vaulting, session management, credential rotation, onboarding/offboarding workflows, and privileged access governance), ensuring high availability, resilience, and operational readiness. Engineer automated onboarding and lifecycle management for privileged accounts, safes, platforms, and policies using PowerShell, Python, and Bash —building reusable modules and pipelines that standardize provisioning, reduce manual effort, and improve control consistency. Integrate CyberArk with identity providers and enterprise access systems (SSO/MFA/conditional access, directory services), and design robust authentication, authorization, and approval workflows for privileged sessions and credential retrieval. Enable secure machine-to-machine access by implementing patterns for application identities, service accounts, APIs, keys, certificates, and secrets , including rotation, least privilege, and auditability across Windows and Linux workloads. Drive adoption of privileged session controls and monitoring—implementing session recording, command/control policies (where applicable), and evidence retention to support incident response, forensics, and regulatory audits. Partner with cloud and Azure engineering teams to extend PAM controls into Azure (subscriptions, resources, automation accounts, DevOps pipelines, and cloud-native identities), ensuring privileged access is governed consistently across cloud and on-prem. Define and maintain PAM standards, reference architectures, hardening baselines, and operational runbooks—covering safe design, platform configurations, credential types, rotation schedules, break-glass procedures, and emergency access. Troubleshoot complex integration and operational issues across CyberArk components, directories, endpoints, and network dependencies—providing deep technical support and root-cause analysis to maintain service reliability and performance. Establish metrics and continuous improvement practices for PAM effectiveness (onboarding coverage, rotation compliance, session governance, access review outcomes), driving measurable reduction in privileged risk and improved audit posture. Provide technical leadership to engineers and stakeholders through workshops, enablement sessions, and hands-on guidance—accelerating onboarding of new systems, improving operational maturity, and ensuring secure-by-design delivery. WHAT YOU WILL NEED: Bachelor’s or Master’s degree in computer science, Cybersecurity, Information Systems, Engineering, or a related technical field. CyberArk certifications strongly preferred: CyberArk Defender (PAM) CyberArk Sentry CyberArk Guardian Additional IAM or security certifications are beneficial: CISSP, CISM, CCSP Microsoft Entra ID / Azure security certifications TOGAF or equivalent architecture certification (advantage) 8–12+ years of experience in identity security, PAM engineering, IAM, or security architecture roles. Proven experience designing and implementing CyberArk PAM solutions in enterprise or highly regulated environments. Hands-on experience with privileged access across Windows, Linux/Unix, databases, network devices, cloud platforms, and applications. Experience integrating PAM with cloud (AWS, Azure, GCP), DevOps, and CI/CD environments. Demonstrated ability to advise senior stakeholders on privileged access risks, architectural trade-offs, and remediation strategies. Experience supporting audits, compliance initiatives, and security risk assessments related to privileged access. WHAT'S IN IT FOR YOU? Culture & Development: Friendly Environment: We take pride in our culture and love spending time together. Team Spirit: Be part of a supportive team that uplifts each other. Mentorship and coaching: Our colleagues are experts in their field, and you can expect to have a solid team to rely on. Personalized Development Program: We realize that one size doesn't fit all, so you'll receive an individual development plan tailored to your career aspirations. Social Benefits: Work Flexibility: Embrace flexible working hours and choose from remote, hybrid, or onsite work models. Multiple Office Locations: In Sofia, Plovdiv, Stara Zagora, and Nis, you can choose where you would like to work. A Suite of Perks: Enjoy food vouchers, additional health insurance, and more. Community and Connections: Engage in exciting social events and team initiatives. Ready to advance your career with a tech leader passionately driven by innovation? Wiser, We Have The Code®