Privileged Access Specialist (Cyberark)

Galderma is a leading dermatology company operating in approximately 90 countries. They offer a science-based portfolio of premium brands and services across Injectable Aesthetics, Dermatological Skincare, and Therapeutic Dermatology. Founded in 1981, the company is focused on skin health and advancing dermatology for diverse skin stories worldwide.

• Higher education in Information Technology, Information Security or equivalent experience.
• Minimum 5 years in privileged access management or IT security, with at least 3 years hands-on experience with CyberArk PAS/Privilege Cloud in production.
• Practical experience with Vault, CPM, PSM, and PVWA administration, privileged account onboarding, and policy configuration.
• Ability to create or maintain custom CPM plugins and PSM connectors.
• Strong knowledge of Windows Server, Active Directory (including Kerberos, delegation, GPO tiering), Unix/Linux, and networking concepts (TLS, firewalls, load balancing).
• Proficiency in PowerShell scripting and REST API integration; knowledge of Python is advantageous.
• Experience with secrets management tools such as Conjur, Secrets Hub, CCP/CP, and HashiCorp Vault, and integration with CI/CD or Kubernetes pipelines.
• Experience in regulated environments (SOX/ITGC) and producing audit evidence/documentation; GxP is a plus.
• Exposure to SIA/just-in-time access models, OT/manufacturing environments, or cloud privileged access controls is a plus.
• Required to hold CyberArk Defender certification; Sentry certification preferred.
• Fluent in English.

Nice to have:

• Skills or experience with SOX, ITGC, GxP, SIA, just-in-time access models, OT/manufacturing environments, and cloud privileged access controls.
• Experience with Python scripting.

• Administer and operate Galderma’s CyberArk platform components including Vault, CPM, PSM, PVWA, HTML5 Gateway, PTA, PSMP, and Identity/SIA.
• Lead platform lifecycle activities such as upgrades, patching, disaster recovery testing, backup and restore, certificate management, and system hardening.
• Configure and maintain privileged access policies including password rotation, reconciliation, session isolation and recording, exclusive access, and dual control workflows.
• Onboard privileged accounts across Windows, Unix/Linux, databases, network devices, cloud environments, SaaS applications, and OT/manufacturing systems.
• Develop and maintain custom integrations with CPM plugins and PSM connectors for complex environments.
• Support privileged session inspection, monitoring, and recording, integrating with SIEM for enhanced detection.
• Manage secrets and machine identities with Conjur, Secrets Hub, Credential Providers, and API key lifecycles.
• Contribute to PAM architecture and automation including onboarding and compliance reporting using REST API and PowerShell.
• Support audit and compliance requirements by providing documentation and evidence for privileged access controls and remediation actions.
• Maintain operational documentation and support incident response, forensic review, and break-glass procedures with the IAM team.