CyberArk Support Engineer

We are looking for a CyberArk Support Engineer to join KeyData's Delivery Services team. In this role, you will provide Level 2 and Level 3 support for enterprise CyberArk environments while taking ownership of critical customer incidents. You will troubleshoot complex technical issues, perform root cause analysis, support infrastructure and CyberArk platform operations, and collaborate with internal teams to ensure the timely resolution of customer issues. This role requires strong technical expertise in CyberArk, Windows infrastructure, networking, and scripting.

Location: Canada

Employment Type: Contract, Remote

Vacancy Status: Immediate Opening: This position is currently available, and hiring is underway

What You'll Do

Design, implement, configure, and support Privileged Access Management (PAM) solutions to securely manage privileged identities throughout their lifecycle.

Lead incident response activities, perform advanced troubleshooting, facilitate war rooms, and conduct detailed root cause analysis (RCA) for PAM-related incidents and service disruptions.

Act as the primary technical escalation point for complex PAM issues, providing timely resolution while adhering to established SLAs and operational standards.

Manage and support CyberArk/Idira components including Vault, PVWA, CPM, PSM, CCP, SCIM, and related integrations in enterprise environments.

Discover, assess, onboard, and manage privileged accounts to support least-privilege and Zero Standing Privilege initiatives.

Collaborate with project teams, infrastructure teams, security teams, and business stakeholders to design and implement PAM solutions for new and existing technologies.

Implement security patches, upgrades, system maintenance, cleanup activities, and server decommissioning while ensuring compliance with security and operational requirements.

Support cloud transformation initiatives by providing technical expertise on cloud-based PAM integrations and migrations.

Analyze recurring issues, identify process bottlenecks, and recommend automation, workflow improvements, and risk mitigation strategies.

Develop and maintain operational procedures, technical documentation, knowledge articles, training materials, and lifecycle management documentation.

Review architecture diagrams, technical requirements, and security controls to identify risks and recommend appropriate remediation strategies.

Support security investigations and collaborate with internal teams to assess and remediate IAM and PAM-related security risks.

Participate in change management, release management, code promotion processes, and Agile delivery practices.

Participate in a rotating on-call support model to ensure operational continuity and service availability.

Who We're Looking For

4+ years of hands-on experience as a CyberArk/Idira Engineer, Administrator, or PAM Specialist in large enterprise environments.

Strong expertise in designing, implementing, administering, and troubleshooting CyberArk/Idira solutions, including: Vault, PVWA, CPM, PSM, CCP, SCIM

Experience supporting self-hosted/on-premises CyberArk environments, including upgrades, migrations, cleanup activities, and server decommissioning.

Strong understanding of Identity & Access Management (IAM) and Privileged Access Management (PAM) principles, controls, and best practices.

Experience integrating PAM solutions across: Active Directory, Azure Active Directory / Entra ID, Windows, Unix/Linux, Databases, Mainframe environments

Experience with REST APIs, workflow automation, and scripting using Python, PowerShell, or similar technologies.

Strong background in Incident, Problem, Change, and Service Continuity Management within ITIL-based environments.

Experience performing root cause analysis, security assessments, risk reviews, and control validation activities.

Familiarity with cloud technologies and cloud migration initiatives; CyberArk Cloud/Pcloud migration experience is considered a strong asset.

Experience working within Agile delivery environments and using tools such as Jira, Confluence, and SharePoint.

Strong analytical, troubleshooting, documentation, and stakeholder management skills.

Excellent verbal and written communication skills with the ability to communicate technical concepts to both technical and non-technical audiences.

Bachelor's degree in Computer Science, Information Technology, Engineering, Information Security, or equivalent experience.

CISSP, CyberArk certifications, or other security certifications are considered assets.

Nice-to-Have Skills

Experience supporting Zero Standing Privilege (ZSP) initiatives.

Experience with enterprise security governance, risk management, and compliance frameworks.

Knowledge of current cybersecurity threats, IAM/PAM trends, and security best practices.

Engineering, application support, or software development background.

Experience with on-premises to cloud PAM migrations.

Compensation

The hourly rate range for this position is $35–$45 CAD per hour. The final rate will be determined based on the candidate’s experience, overall fit for the role, and expected ramp-up time. This is a 06-month, full-time contract role, working 40 hours a week. At KeyData Cyber, we are committed to fair and competitive compensation. We regularly benchmark across positions, industries, sectors, and experience levels, ensuring our approach recognizes each person’s unique strengths, contributions, and the value they bring to the organization.#LI-RR1