Logo
Cognizant

Privilege Access Management Engineer

Cognizant, Raleigh, North Carolina, United States, 27601

Save Job

Job Title -Privilege Access Management Engineer

* remote *

-----This role requires ITAR -- US Citizens only will be considered-----

Experienced Privilege Access Management Engineer with hands‑on expertise in securing enterprise environments using CrowdStrike Identity Protection and CyberArk Privilege Cloud. Proven track record of implementing and managing PAM solutions to safeguard critical assets and reduce attack surfaces across hybrid infrastructures.

Technical Skills & Platform Experience

Operating Systems: Windows Server (2016/2019/2022), Linux (RHEL, Ubuntu)

Endpoints: Windows Workstations (10/11)

Databases: SQL Server, Oracle, MySQL

PAM Tools: CyberArk Privilege Cloud, CrowdStrike Identity Protection

Security Practices: Least privilege enforcement, credential vaulting, session monitoring, threat detection

PowerShell scripting for Windows environments

Basic Python or REST API knowledge for integrations

Understanding of CyberArk REST APIs and SDK usage

Experience with configuration management tools

Responsibilities & Capabilities

Deploy and maintain PAM solutions across Windows and Linux platforms

Integrate PAM with databases and workstation environments

Monitor privileged access and respond to identity‑based threats

Collaborate with IT and business teams to enforce access policies

Conduct audits and ensure compliance with regulatory standards

Scripting and Automation Monitoring and Logging

Log analysis skills (CyberArk logs, system logs, network logs)

Understanding of SIEM integration requirements

Performance monitoring and capacity planning

Incident response and root cause analysis

Security and Compliance Knowledge

Understanding of privileged access security best practices

Knowledge of compliance frameworks (SOX, PCI‑DSS, NIST, ISO 27001)

Risk assessment and security control implementation

Understanding of zero trust security principles

Preferred Qualifications Certifications

CyberArk Trustee or higher certification

Relevant cloud platform certifications (AWS, Azure, GCP)

Security certifications (CISSP, CISM, Security+)

CrowdStrike Certified Identity Specialist (CCIS)

Experience

5+ years in cybersecurity or systems administration

Experience with hybrid cloud/on‑premises environments

Background in enterprise identity and access management

Previous experience with privileged access management solutions

Soft Skills and Responsibilities Problem‑Solving

Strong analytical and troubleshooting methodology

Ability to work under pressure during security incidents

Documentation skills for procedures and incident reports

Collaboration with security, infrastructure, and application teams

Communication

Ability to explain technical concepts to non‑technical stakeholders

Experience working with vendors and third‑party integrators

Skills in training end users on secure access procedures

Salary and Other Compensation

Applications will be accepted until Nov 30 2025

The annual salary for this position is between $120–150 K depending on experience and other qualifications of the successful candidate.

This position is also eligible for Cognizant’s discretionary annual incentive program, based on performance and subject to the terms of Cognizant’s applicable plans.

Benefits: Cognizant offers the following benefits for this position, subject to applicable eligibility requirements:

Medical/Dental/Vision/Life Insurance

Paid holidays plus Paid Time Off

401(k) plan and contributions

Long‑term/Short‑term Disability

Paid Parental Leave

Employee Stock Purchase Plan

Disclaimer: The salary, other compensation, and benefits information is accurate as of the date of this posting. Cognizant reserves the right to modify this information at any time, subject to applicable law.

Cognizant is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to sex, gender identity, sexual orientation, race, color, religion, national origin, disability, protected Veteran status, age, or any other characteristic protected by law.

#J-18808-Ljbffr