CyberArk PAM & EPM Lead Engineer

Grant Thornton Global Delivery Center Poland (GDC) supports operations of a growing multinational platform, providing audit, tax, and advisory services through the member firms of the Grant Thornton International Ltd (GTIL) network operating in more than 150 markets worldwide. GDC Poland collaborates across countries and time zones, working on complex projects and advanced technologies.

• Experience with CyberArk Privilege Cloud components: Identity Administration, PVWA, CPM, PSM, PSMP, CCP.
• Experience with CyberArk Endpoint Privilege Manager (EPM).
• Knowledge of Active Directory, Entra ID, and Azure.
• Experience with ServiceNow.
• Proficient in PowerShell and REST APIs.
• Windows and Linux Administration skills.
• Experience in Incident, Change, and Problem Management.

Nice to have:

• CyberArk Sentry / Certified Delivery Engineer (CDE – Privilege Cloud, CDE – EPM).
• ITIL Foundation certification.
• Privilege Cloud SaaS Operations experience.
• EPM Policy Design & Administration.
• PAM/EPM M&A Integrations experience.
• Automation & Reporting skills.
• Experience with Global Support and Governance Models.

• Lead administration and support of CyberArk Privilege Cloud and EPM platforms.
• Manage Safes, Platforms, CPM, PSM, PSMP, CCP, and privileged account onboarding.
• Design and maintain EPM policies, Sets, Rules, Application Control, and Privilege Elevation policies.
• Manage endpoint onboarding, agent deployment, policy tuning, and exception handling.
• Drive password management, session monitoring, and privileged access governance.
• Troubleshoot PAM and EPM platform issues and act as L3/L4 escalation point.
• Develop automation using PowerShell, REST APIs, and Python.
• Integrate CyberArk with Active Directory, Entra ID, ServiceNow, SIEM, Azure, AWS, and GCP.
• Lead PAM/EPM implementation, upgrades, M&A integrations, and operational improvements.
• Review, tune, and optimize EPM policies to reduce false positives and user impact.
• Maintain runbooks, SOPs, KB articles, compliance evidence, and audit documentation.
• Mentor engineers and support service maturity, reporting, and governance activities.