PAM Engineer

The company operates in the pharmaceutical industry and has a focus on regulated enterprise environments. The position is based in Warsaw Hub with hybrid working and close collaboration with security and infrastructure teams.

• 3-5 years of experience with CyberArk/Idira Privilege Cloud environments.
• Strong practical knowledge of privileged account management, safes, access permissions, password management, CPM, PSM, and session management.
• Experience with managing and troubleshooting Privilege Cloud connectors.
• Knowledge of Windows and Linux environments, Active Directory, Entra ID, SSO, and MFA technologies.
• Understanding of PAM business continuity and emergency access processes.
• Ability to implement and configure solutions based on technical designs.
• Experience with incident, problem, and change management processes.

Nice to have:

• Hands-on experience with multiple Idira PAM capabilities, including Privilege Cloud, WPM, EPM, and Vendor PAM.
• Experience with PAM integrations, APIs, and automation.
• Experience in a GxP-regulated environment, preferably in the pharmaceutical or life sciences industry.
• Understanding change control processes, validation requirements, and compliance documentation.
• Experience with ServiceNow, SIEM integrations, PowerShell, Linux, and SSH.
• Relevant CyberArk or Idira certifications.

• Monitor, support, and maintain the Privileged Access Management (PAM) environment.
• Perform health checks, incident resolution, service request fulfilment, and operational support activities.
• Troubleshoot privileged accounts, password rotation and reconciliation issues, safes, policies, session management, authentication, integrations, and connectivity challenges.
• Manage and maintain Privilege Cloud connector servers, including patching, upgrades, certificate management, recovery, and redeployment.
• Onboard and maintain privileged accounts, target systems, safes, platforms, and policies.
• Configure and test architect-approved PAM solutions and enhancements.
• Support the rollout and ongoing operation of WPM, EPM, Vendor PAM, and other Idira PAM capabilities.
• Contribute to automation and integrations using APIs, PowerShell, and other supported technologies.
• Participate in major incident management, root cause analysis, disaster recovery testing, and break-glass exercises.
• Maintain operational documentation, troubleshooting guides, compliance evidence, and audit records.
• Collaborate closely with infrastructure, security, identity, application, and architecture teams.

Location: Warsaw Hub (hybrid working). Operational Environment: Must be comfortable in a regulated enterprise environment.