LHH is working with a Financial Services company based on the East Coast that is looking to hire an IAM Systems Admin who has solid experience with Cyberark PAM. This will be a 1 year project and be 100% remote. This is a mid-level position and is looking for someone with at least 2 years of IAM Administration and CyberArk PAM.

Note: This role ONLY pays up to $44/hr.

The IAM Systems Administrator – CyberArk Privilege Cloud will be responsible for the administration, operational support, and continuous optimization of the organization’s CyberArk Privileged Access Management (PAM) platform.

This role ensures the secure management of privileged credentials, secrets, and session activity across hybrid infrastructure (cloud and on-prem), enabling the enforcement of least-privilege access, Zero Standing Privileges (ZSP), and Just-in-Time (JIT) access models.

As part of the Identity and Access Management (IAM) team, this position will work closely with security, cloud, infrastructure, and compliance teams to support key security initiatives, maintain policy enforcement, and ensure operational resilience of PAM services in alignment with Zero Trust Architecture principles.

Position Accountabilities

· Operate and maintain CyberArk Privileged Cloud environments.

· Onboard and manage privileged accounts, secrets, safes, and credentials using:

o PVWA (Password Vault Web Access)

o PSM (Privileged Session Manager)

o CPM (Central Policy Manager)

· Basic troubleshooting as it relates to safes, privileged accounts, password rotation and policy issues.

· Ensure healthy state of integrations of CyberArk with various platforms, including Windows, Linux, databases, applications, and cloud services (AWS, Azure, GCP).

· Monitor the health and performance of CyberArk components.

· Configure and enforce security policies for privileged access at safe and platform levels.

· Manage CyberArk integrations with SIEM, ITSM, and other enterprise tools.

· Work with internal teams (security, audit, compliance) to meet regulatory and governance requirements.

· Create and maintain documentation related to PAM operations, procedures, and configurations.

· Support audits by providing logs, access reports, and evidence of controls.

Required

· Must have 2+ years of hands-on operational experience with CyberArk PAM.

· Minimum 2 year college degree required.

· CyberArk certification.

· Must have experience onboarding and configuring accounts, safes, & policies.

· Strong understanding of IAM, PAM, and Zero Trust principles.

· Familiarity with Vault, PVWA, PSM, CPM, and Conjur (optional).

· Strong knowledge of Active Directory, LDAP, and RBAC models.

· Excellent problem-solving and communication skills.

Preferred

· Bachelor’s degree in Information Security, Computer Science, Information Systems Management, or related field.

· Experience with CyberArk Endpoint Privileged Management (EPM).

· Experience with CyberArk Workforce Password Manager (WPM).

· Experience with cloud platforms (e.g., AWS IAM, Azure AD, etc.).

· SailPoint IIQ or ISC experience

· Any additional industry PAM level certifications

· Experience responding to security incidents and provide root cause analysis for PAM-related events.

· CyberArk workflows for automation and integration tasks.

· Experience with scripting (PowerShell, Python, etc.)

· Professional security management certification such as a Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Information Systems Auditor (CISA) or other similar credentials preferred.

· Knowledge of compliance frameworks (HIPAA, PCI-DSS, SOX).

Tools & Technologies:

· CyberArk, PVWA, CPM, PSM, PTA

· Windows/Linux OS

· SIEM platforms (e.g., Splunk, QRadar)

· Cloud platforms: AWS, Azure, GCP

· Scripting: PowerShell, Python, REST APIs

Knowledge & Skills

· Self-driven, detail-oriented, with excellent written and verbal communication skills, interpersonal and collaborative skills

· Ability to write technical documentation to clearly document technical processes and procedures with strong attention to detail

· High degree of initiative, dependability, and ability to work with limited supervision

· High level of personal integrity, as well as the ability to professionally handle confidential matters and procedures

Benefit offerings available for our associates include medical, dental, vision, life insurance, short-term disability, additional voluntary benefits, EAP program, commuter benefits and a 401K plan. Our benefit offerings provide employees the flexibility to choose the type of coverage that meets their individual needs. In addition, our associates may be eligible for paid leave including Paid Sick Leave or any other paid leave required by Federal, State, or local law, as well as Holiday pay where applicable.

Equal Opportunity Employer/Veterans/Disabled

To read our Candidate Privacy Information Statement, which explains how we will use your information, please navigate to https://www.lhh.com/us/en/candidate-privacy

The Company will consider qualified applicants with arrest and conviction records in accordance with federal, state, and local laws and/or security clearance requirements, including, as applicable:

• The California Fair Chance Act
• Los Angeles City Fair Chance Ordinance
• Los Angeles County Fair Chance Ordinance for Employers
• San Francisco Fair Chance Ordinance

Massachusetts Candidates Only: It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.