Senior Security Engineer (CyberArk PAM)

Help AG, an e& enterprise company, is seeking a highly skilled Senior Security Engineer (CyberArk PAM) responsible for the design, implementation, administration, and support of Privileged Access Management (PAM) infrastructure using CyberArk. This role requires deep technical knowledge, hands-on experience, and the ability to collaborate across various IT and business teams to secure privileged accounts and identities in enterprise environments.

Responsibilities:

• Design, deploy, configure, and maintain the CyberArk PAM suite including components such as PAS, PVWA, CPM, PTA, PSM, and Conjur.
• Manage and rotate privileged credentials across servers, databases, network devices, applications, and cloud platforms.
• Define and implement policies for privileged access usage, session recording, and user behavior monitoring.
• Perform onboarding of privileged accounts and maintain vault policies and safe configurations.
• Monitor PAM systems and respond to security events, incidents, or alerts related to privileged accounts.
• Conduct regular health checks and performance tuning of CyberArk components.
• Integrate CyberArk with SIEM, ticketing systems, identity governance tools, and other cybersecurity solutions.
• Maintain detailed technical documentation, including configurations, procedures, and best practices.
• Work closely with internal teams including Identity & Access Management (IAM), Compliance, and IT Operations.
• Provide technical guidance and mentoring to junior engineers and participate in knowledge-sharing sessions.
• Support audit and compliance activities by generating reports and participating in assessments.

Qualifications & Skills:

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• 5+ years of experience in Information Security with at least 3 years focused on CyberArk PAM administration and engineering.
• Strong expertise in the CyberArk suite (PAS, CPM, PVWA, PSM, PTA, AAM, etc.).
• Experience with Windows, Linux, and cloud platforms (AWS/Azure) in relation to privileged access.
• Knowledge of LDAP, Active Directory, RDP, SSH, and authentication/authorization protocols.
• Familiarity with PowerShell, REST APIs, and automation scripting for CyberArk operations.
• Solid understanding of security best practices, access control principles, and risk management frameworks.
• Experience with integration into SIEMs (Splunk, QRadar), ITSM systems (ServiceNow), and identity management platforms.
• Preferred Certifications: CyberArk Certified Delivery Engineer (CDE), CyberArk Defender or Sentry Certification, CISSP, CISA, or GIAC certifications.
• Experience in compliance frameworks (ISO 27001, NIST, PCI-DSS, etc.).
• Strong analytical and troubleshooting skills.
• Excellent verbal and written communication skills.
• Ability to work independently and in a team environment.
• Strong time management and organizational skills.
• Customer-oriented with a proactive approach to problem-solving.

Benefits:

• Health insurance with one of the leading global providers for medical insurance.
• Career progression and growth through challenging projects and work.
• Employee engagement and wellness campaigns throughout the year.
• Excellent learning and development opportunities.
• Annual flight tickets to home country.
• Inclusive and diverse working environment.
• Flexible/hybrid working environment.
• Open door policy.

About Us:
Help AG is the cybersecurity arm of e& enterprise and provides leading enterprise businesses and governments across the Middle East with strategic consultancy and tailored information security services and solutions that address their diverse requirements. Established in the Middle East since 2004, Help AG was strategically acquired by e& in Feb 2020, creating a cybersecurity and digital transformation powerhouse in the region. Help AG has firmly established itself as the region's trusted IT security advisor by remaining vendor-agnostic, trustworthy, independent, and cybersecurity-focused.