Security Engineer

The Information Security Engineer will be responsible for the design, implementation, operation, and security of technologies related to the protection of privileged credentials.

The ideal candidate will have prior experience in developing and operating CyberArk’s Privileged Account Security Solution.

The Engineer will be responsible for participating in projects to extend the capabilities of the CyberArk service along with the continued operation and maturation of the service.

The engineer will also create and enhance documentation related to configuration, standard operating procedures, workflow diagrams, and service intake forms..

We are seeking an experienced AI Solutions Engineer to design and develop intelligent agents that automate and enhance CyberArk Solution Design, onboarding, compliance validation, documentation, and operational processes.

The role will focus on leveraging Generative AI, Agentic Frameworks, and enterprise automation technologies to improve efficiency, consistency, and scalability across privileged access management services.

We seek someone who is proactive and takes ownership of the service.

The candidate is expected to review various sources for best practices, security information, and threat vectors in order to determine the potential impact to the environment and recommend configurations and solutions accordingly.

Risk assessment techniques, scripting, linux and Windows administration, and cloud technology experience are desired

Acts as the technical owner for solution design activities, driving requirements analysis, architecture decisions, implementation planning, and continuous service improvement.

Essential Functions of the Job:

• Develop and manage CyberArk’s Privileged Account Security Solution including the following:

• Configure and operate CyberArk Enterprise Password Vault component and Safe design

• Configure and operate CPM and PVWA components

• Configure and operate High Availability and DR components

• Configure and operate PSM, AAM, and CCP products

• Lead solution and design reviews for privileged access onboarding initiatives.

• Develop repeatable solution patterns and reference architectures for credential protection capabilities.

• Create standards for credential protection integrations.

• Partner with application teams to assess requirements and define privileged access onboarding strategies.

• Provide technical leadership and guidance on PAM design decisions.

• Design and develop AI agents for solution assessment, pattern recommendation, design document generation, compliance validation, and knowledge management.

• Design, build, test, and maintain AI agents using enterprise-approved frameworks.

• Develop Retrieval Augmented Generation (RAG) solutions leveraging PAM documentation and knowledge repositories.

• Build workflow automation integrating ServiceNow, CyberArk, Active Directory, and cloud platforms.

• Develop prompt engineering standards and AI governance controls.

• Measure and report AI solution effectiveness through KPIs and adoption metrics.

• Facilitate design workshops with stakeholders, translate business requirements into technical solution designs, present recommendations to senior leadership, and drive alignment across security, application, infrastructure, and operations teams.

• Configure and operate Multi-factor authentication

• Configure and operate LDAP, RADIUS, and SAML integration

• Integrating various target platforms such as operating system, network device, service accounts, etc.

• Document, report, and present on CyberArk design, performance metrics, security and operational log activity

• Develop working knowledge for extended global team on all matters related to CyberArk technology

• Follow ITIL process for incident and change management

• Excellent English language skills, both written and verbal

• Excellent interpersonal, communication, consultative and project management skills

• Must be self-motivated and able to work independently, often unsupervised