Rest

Engineer

• Join Rest's Information Security team
• As an Privileged Access Engineer, you will play a critical role in designing, implementing, and managing Privilege Identity Access Management solutions across the Rest environment.
• Your primary focus will be on deploying and maintaining CyberArk Privileged Cloud solution to secure privileged access throughout the enterprise.
• This role requires a proactive and security-focused mindset, working closely with IT, security and the business to mitigate risks, enforce compliance, and optimize privileged access controls.
• You'll contribute to the strategic evolution of Rest's IAM landscape, ensuring that our systems, applications, and data remain protected against emerging threats.
• Design, implement, and manage CyberArk Privileged Cloud solution to secure privileged accounts and sensitive credentials across the enterprise.
• Lead the installation, configuration, and maintenance of CyberArk privileged Cloud components including Vault, PAS, PVWA, CPM, PSM, and PTA.
• Monitor and maintain daily operations of PAM systems to ensure high availability, optimal performance, and robust security of privileged access.
• Oversee the full lifecycle management of privileged accounts—provisioning, deprovisioning, credential rotation, and auditing—across platforms such as CyberArk Privilege Cloud, Microsoft Entra ID, and SailPoint Identity Security Cloud (ISC).
• Conduct regular privileged access reviews, ensuring strict adherence to the principle of least privilege and compliance requirements.
• Investigate and respond to security incidents or anomalies related to privileged access, working closely with the incident response team for swift resolution and root cause analysis.
• Partner with IT and application teams to integrate PAM solutions seamlessly with critical enterprise systems and tools.
• Develop and enforce policies governing privileged access in line with security frameworks and compliance standards.
• Manage patching, upgrades, and troubleshooting of all CyberArk components, ensuring a secure and stable environment.
• Provide technical expertise, guidance, and training to internal teams and end-users on best practices in identity and access management.
• Perform regular audits and generate detailed reports on privileged account usage, policy violations, and compliance status.
• Identify and resolve issues related to authentication, access controls, and application integration within the broader identity ecosystem.
• Maintain comprehensive documentation of configurations, processes, and operational best practices across all supported identity platforms.