Job Description

Job Opportunity: L3 CyberArk PAM Operations Engineer

Location: Amsterdam, Netherlands (TNDL)

Experience Level: 4–6 Years (Minimum 5 years specifically in CyberArk PAM)

Start Date: ASAP

Duration: 6 Months (with potential for extension)

Status: Open

We are seeking a highly skilled L3 Operations Engineer with deep technical expertise in CyberArk Privileged Access Management (PAM) In this senior-level role, you will be responsible for the stability, security, and optimization of our Core-PAS environment. You will act as the primary technical lead for system upgrades, disaster recovery (DR) protocols, and complex onboarding projects across a diverse digital infrastructure including Windows, Unix, and cloud-based applications.

Key Responsibilities

• Core-PAS Administration: Manage and optimize all CyberArk Core-PAS components, including the Digital Vault, Central Policy Manager (CPM), Privileged Session Manager (PSM/PSMP), and Credential Providers (CP/CCP).
• Lifecycle & Continuity: Lead end-to-end component version upgrades and manage critical Disaster Recovery (DR) procedures, ensuring seamless Failover and Failback operations.
• Complex Onboarding: Design and execute onboarding workflows for privileged accounts across Windows, SSH/Unix, Databases, and Web applications.
• Tier-3 Technical Support: Serve as the final point of escalation for troubleshooting deep-seated technical issues, particularly regarding existing custom connectors and integration points.
• Security Integration: Align PAM operations with Cyber Threat Intelligence and Microsoft Identity and Access Management (IAM) strategies to mitigate risk.
• Stakeholder Management: Engage with cross-functional teams and business stakeholders to facilitate knowledge transfer and ensure security policy compliance.

Technical Requirements

Must-Have Qualifications

• Certification: Must be CyberArk Sentry or CDE (CyberArk Delivery Engineer)
  certified.
• Core Expertise: Minimum of 5 years of dedicated, hands-on experience with CyberArk PAM (Core-PAS)
• Component Mastery: In-depth knowledge of Vault, CPM, PSM, PSMP, CP, and CCP.
• Operational Readiness: Proven experience in version upgrades and executing DR Failover/Failback scenarios.
• Platform Breadth: Strong experience onboarding accounts for Windows, SSH, DB, and Web applications.
• Communication:
  Exceptional English communication skills for effective stakeholder engagement.

Good-to-Have Skills

• Advanced Features: Hands-on experience with HTML5 Gateway and PTA (Privileged Threat Analytics)
• AAM & Automation: Experience with CyberArk AAM
  integration, service account onboarding, and API-driven automation.
• Digital Ecosystems: Familiarity with Apache Spark and Microsoft IAM frameworks.

Candidate Profile

• Expertise: 4–6 years of experience in Digital Security or Cyber Security operations.
• Problem Solver: A methodical troubleshooter who can navigate complex custom connectors and legacy integrations.
• Proactive: Able to hit the ground running in an "ASAP" environment, taking ownership of the L3 operational tier.

Work Environment

Joining our team in Amsterdam, you will work in a high-velocity environment that values technical excellence and proactive risk management. This role is ideal for a CyberArk specialist looking to manage a mature environment and influence security operations at an enterprise scale.