Design, engineer, deploy, and operate Privileged Access Management solutions using CyberArk, 1Password, Hashicorp Vault, and other privileged tooling across the enterprise.
Administer and enhance CyberArk components including Vault, CPM, PVWA, PSM, and related integrations.
Implement and manage privileged access controls for users, service accounts, application credentials, and non-human identities.
Engineer and operate enterprise PKI services, including certificate issuance, renewal, revocation, and lifecycle management.
Administer and enhance PKI platforms such as Microsoft AD Certificate Services (ADCS), DigiCert, and Keyfactor certificate lifecycle management tooling.
Manage and support public and private certificates used for infrastructure, applications, and secure service-to-service communication.
Integrate CyberArk and PKI capabilities into applications, platforms, and cloud environments to enable secure privileged and machine-based access.
Develop and maintain automation for CyberArk and PKI workflows using scripting and API-based integrations (e.g., PowerShell, Python).
Partner with infrastructure, cloud, and application teams to onboard systems into CyberArk and PKI services and remediate security gaps.
Troubleshoot and resolve complex CyberArk- and PKI-related issues, including credential failures, certificate outages, and access disruptions.
Ensure PAM and PKI services meet availability, resiliency, and operational performance requirements in a global environment.
Support audit, compliance, and security review activities related to privileged access and cryptographic controls.
Maintain technical documentation, configuration standards, and operational runbooks to support scalable operations.
Continuously improve privileged access and PKI maturity through automation, platform enhancements, and process optimization.