Job Description

Job Opportunity: L3 CyberArk PAM Operations Engineer

Location: Amsterdam, Netherlands (TNDL)

Experience Level: 4–6 Years (Minimum 5 years specifically in CyberArk PAM)

Start Date: ASAP

Status: Open

We are looking for a highly skilled L3 Operations Engineer specializing in CyberArk Privileged Access Management (PAM) In this senior-level operational role, you will be responsible for the health, security, and optimization of our Core-PAS environment. You will lead complex onboarding projects, manage critical version upgrades, and act as the primary point of escalation for troubleshooting custom connectors and system failovers.

Key Responsibilities

• Core-PAS Administration: Maintain and optimize all CyberArk Core-PAS components, including the Vault, CPM, PSM, PSMP, CP, and CCP.
• Lifecycle Management: Lead component version upgrades and manage Disaster Recovery (DR) procedures, including hands-on execution of Failover and Failback processes.
• Advanced Onboarding: Manage the end-to-end onboarding process for privileged accounts across diverse platforms, including Windows, SSH/Unix, Databases, and Web applications.
• Tier-3 Support: Provide expert-level troubleshooting for existing custom connectors and complex system integration issues.
• Security Operations: Ensure the PAM solution aligns with Cyber Threat Intelligence and Microsoft IAM frameworks to maintain a robust security posture.
• Stakeholder Engagement: Act as a technical liaison between the security team and business stakeholders, ensuring clear communication and alignment on privileged access requirements.

Technical Requirements

Must-Have Qualifications

• Certification: Must be CyberArk Sentry or CDE (CyberArk Delivery Engineer)
  certified.
• Core Expertise: Minimum of 5 years of dedicated experience with CyberArk PAM (Core-PAS)
• Technical Breadth: Hands-on experience managing Vault, CPM, PSM, PSMP, CP, and CCP components.
• Operational Skills: Proven track record in executing DR drills, failovers, and environment upgrades.
• Platform Knowledge: Deep experience in onboarding and managing credentials for Windows, SSH, DB, and Web apps.
• Problem Solving: Strong debugging skills specifically related to custom connectors and PAM integrations.

Good-to-Have Skills

• Advanced Components: Hands-on experience with HTML5 Gateway and PTA (Privileged Threat Analytics)
• AAM Integration: Experience with CyberArk AAM
  (Application Access Manager) for secret management and service account onboarding.
• Automation:
  Proficiency in API-based automation for PAM tasks (a significant advantage).
• Identity Stack: Familiarity with Microsoft IAM
  and Apache Spark within a digital ecosystem.

Candidate Profile

• Experience: 4–6 years in Digital Security/Cybersecurity, with a heavy focus on L3 operations.
• Communication:
  Exceptional stakeholder engagement skills and the ability to explain complex technical risks in a clear, professional manner.
• Adaptability:
  Comfortable working in a high-stakes "ASAP" start environment within the vibrant Amsterdam tech hub.

Work Environment

Joining our Amsterdam team (TNDL), you will be part of a sophisticated digital operations unit. This role offers the opportunity to take ownership of a critical security platform and influence the way privileged access is managed across a diverse, modern infrastructure.