CyberArk PAM Specialist – PowerShell & REST API

Our client, a leading organization in the national infrastructure and transport sector, is looking for a specialist to manage and evolve their privileged access management platform. This role involves the end-to-end administration, integration, and optimization of critical security components to ensure robust infrastructure protection.

• Design, install, and configure core components of the CyberArk PAM platform, including Digital Vault, PVWA, CPM, and PSM.
• Onboard privileged accounts and manage safes across Windows, Linux, Active Directory, and database environments.
• Implement and maintain security policies for password rotation, reconciliation, and session management.
• Develop automation solutions using PowerShell and REST API to streamline operational workflows.
• Perform advanced troubleshooting and log analysis to resolve complex security incidents.
• Collaborate with cross-functional teams to strengthen the overall security posture and document operational procedures.

• 5+ years of expertise in CyberArk PAM/PAS, specifically Digital Vault, PVWA, CPM, PSM, and PSMP.
• 5+ years of experience integrating security tools with Windows, Active Directory, LDAP, and Linux/Unix systems.
• 5+ years of experience with PowerShell and REST API for security automation.
• 5+ years of experience in the installation, configuration, and administration of enterprise PAM platforms.
• 5+ years of knowledge regarding security hardening, TLS certificates, DNS, and load balancing.
• 5+ years of experience in troubleshooting and log analysis within critical enterprise infrastructure.
• You possess a solid understanding of security principles such as least privilege and access governance.
• You're proactive, solution-oriented, and capable of working autonomously in multi-team environments.
• You're willing to participate in on-call service rotations.
• You are fluent in Dutch or French at C2 level with C1 level of English.

Nice to Haves

• Experience with change management and operational runbooks.
• Professional security certifications.

• Start date: 03-01-2027
• Duration: 5 years
• Work regime: Full-time
• Location: Brussels
• Working model: Onsite
• Contract: open to both permanent employees and freelancers.