CyberArk Operations Engineer - Officer

Summary CyberArk Operations Engineer responsible for end-to-end support, administration, and optimization of Privileged Access Management (PAM) platforms. The role focuses on ensuring secure privileged access, platform stability, compliance adherence, and operational excellence across enterprise environments.

Manage day-to-day operations of CyberArk components (Vault, PVWA, CPM, PSM). Perform health checks, monitoring, and incident resolution across PAM infrastructure. Troubleshoot privileged account issues (reconcile failures, logon issues, dual control failures). Ensure SLA adherence for incidents, service requests, and problem management. Onboard privileged accounts (Windows, Unix/Linux, database, application accounts) into CyberArk. Configure and manage PSM connections (Windows, SSH, web, database connectors). Create and manage safes, roles, permissions, and access controls. Handle access approvals, entitlement reviews, and compliance alignment. Implement and manage password policies as per enterprise standards. Identify and remediate non-compliant privileged accounts. Support audit and compliance activities by generating reports and evidence. Ensure adherence to security standards and regulatory requirements. Perform patching, upgrades, and vulnerability remediation of CyberArk components. Maintain DR readiness and support DR testing activities. Optimize platform performance and capacity. Participate in security incident response involving privileged accounts. Conduct root cause analysis and implement preventive fixes. Support risk reduction initiatives aligned to Zero Trust and least privilege. Generate daily/weekly/monthly operational reports. Provide platform metrics, compliance reports, and executive summaries. Collaborate with application, infrastructure, and security teams. Required Skills & Experience Core Technical Skills 10+ years of experience in IAM/PAM and 3+ CyberArk. Bachelor’s degree in computer science, IT, or related field Strong knowledge of: CyberArk components: Vault, PVWA, CPM, PSM Account onboarding and bulk provisioning Safe management and access controls Experience with: Windows & Linux administration Active Directory integration ServiceNow or similar ticketing tools Understanding of: Password vaulting and session management Privileged access governance and controls Zero Trust and least privilege frameworks Exposure to incident handling and compliance processes. Strong problem-solving and troubleshooting mindset Effective communication and stakeholder management Ability to work in a 24x7 operational support model Detail-oriented with focus on risk and compliance Additional Skills (Preferred) Experience with: CyberArk Privilege Cloud Automation/scripting (PowerShell, REST APIs) Agile/DevOps tools (Jira, Azure DevOps) Exposure to other IAM/PAM tools is a plus. About State Street What we do. State Street is one of the largest custodian banks, asset managers and asset intelligence companies in the world. From technology to product innovation, we’re making our mark on the financial services industry. For more than two centuries, we’ve been helping our clients safeguard and steward the investments of millions of people. We provide investment servicing, data & analytics, investment research & trading and investment management to institutional clients. Work, Live and Grow. We make all efforts to create a great work environment. Our benefits packages are competitive and comprehensive. Details vary by location, but you may expect generous medical care, insurance and savings plans, among other perks. You’ll have access to flexible Work Programs to help you match your needs. And our wealth of development programs and educational support will help you reach your full potential. Inclusion, Diversity and Social Responsibility. We truly believe our employees’ diverse backgrounds, experiences and perspectives are a powerful contributor to creating an inclusive