Santander US – Privileged Access Management (PAM) Senior CyberArk Engineer
Overview
The Senior CyberArk Engineer is responsible for architecting, deploying, and maintaining privileged access security solutions using the CyberArk suite. This role ensures the protection of critical systems, credentials, and privileged accounts while aligning with security best practices and regulatory requirements. The ideal candidate possesses deep hands-on expertise with CyberArk Privileged Access Security (PAS), strong security engineering skills, and experience operating in large, complex environments.
Key Responsibilities
CyberArk Engineering & Administration
- Design, deploy, configure, and maintain the full on-premises CyberArk Privileged Access Security (PAS) suite, including:
- Enterprise Password Vault (EPV)
- Privileged Session Manager (PSM)
- Privileged Session Manager for SSH (PSM-SSH)
- Central Policy Manager (CPM)
- Privileged Threat Analytics (PTA)
- Implement and maintain CyberArk safes, platforms, policies, and connectors.
- Integrate CyberArk with enterprise systems, including LDAP/AD, and SIEM ticketing systems, and cloud platforms (AWS, Azure, GCP).
- Build and maintain custom connectors and plugins for applications and infrastructure.
Security Architecture & Governance
- Develop and enforce privileged access policies and best practices.
- Conduct threat modeling and ensure PAM alignment with regulatory frameworks (SOX, GLBA, NYDFS, etc.).
- Review privileged access workflows and recommend improvements to strengthen security posture.
Automation & Continuous Improvement
- Automate onboarding of privileged accounts, systems, and applications using REST APIs, PowerShell, Python, or similar tools.
- Tune CPM/PSM performance, optimize vault operations, and improve automated credential rotation processes.
- Implement continuous monitoring, alerting, and reporting mechanisms.
Operations & Support
- Serve as a subject matter expert (SME) for CyberArk-related issues across infrastructure, development, and security teams.
- Troubleshoot complex vaulting, credential, and session management issues.
- Perform CyberArk upgrades, patching, health checks, and system hardening.
- Participate in on-call rotations and provide escalation-level support.
Collaboration & Training
- Work closely with IAM, security operations, risk, and compliance stakeholders.
- Provide guidance and mentorship to junior engineers.
- Develop documentation, runbooks, and best practice guides.
Required Qualifications
- 5–8+ years of experience in Information Security or Identity and Access Management.
- 3–5+ years of hands-on CyberArk engineering experience.
- Strong understanding of privileged access management principles.
- Proficiency with:
- PowerShell, Python, or equivalent scripting languages
- Windows and Linux administration
- Active Directory, LDAP, MFA integrations
- Networking basics (firewalls, proxies, DNS)
- Experience supporting large-scale, high-availability PAM environments.
Preferred Qualifications
- CyberArk Defender, Sentry, or Guardian certifications.
- Experience with:
- Threat and vulnerability management related to privileged access
- Background in regulated industries (finance, healthcare, government).
Core Competencies
- Strong analytical, problem-solving, and debugging skills.
- Excellent communication and documentation abilities.
- Ability to lead complex projects with minimal supervision.
- High attention to detail and commitment to security best practices.
Skills Required
- 5-8+ years of experience in Information Security or Identity and Access Management
- 3-5+ years of hands-on CyberArk engineering experience
- Strong understanding of privileged access management principles
- Proficiency with PowerShell, Python, or equivalent scripting languages
- Windows and Linux administration
- Active Directory, LDAP, MFA integrations
- Networking basics (firewalls, proxies, DNS)
- Experience supporting large-scale, high-availability PAM environments
Santander Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Santander and has not been reviewed or approved by Santander.
-
Retirement Support — A dollar‑for‑dollar 401(k) match up to 6% of eligible pay and immediate vesting are highlighted as core strengths, supporting long‑term savings. This is reinforced by company‑paid disability and life/AD&D coverage that bolster financial security.
-
Leave & Time Off Breadth — Paid time off typically ranges from 18–30 days in the U.S. with 11 paid holidays, plus dedicated volunteer and development time; the UK features a minimum of 25 days with buy/sell options. Some roles also use self‑managed PTO, offering additional flexibility depending on team norms.
-
Parental & Family Support — U.S. parental benefits include 8 weeks paid for all parents and a total of 16 weeks paid for birth mothers, with flexibility for reduced hours around childbirth. Caregiver leave and dependent‑care programs add further family support.
Santander Insights
What We Do
Banco Santander (SAN SM, STD US, BNC LN) is a leading commercial bank, founded in 1857 and headquartered in Spain and one of the largest banks in the world by market capitalization. The group’s activities are consolidated into five global businesses: Retail & Commercial Banking, Digital Consumer Bank, Corporate & Investment Banking (CIB), Wealth Management & Insurance and Payments (PagoNxt and Cards). This operating model allows the bank to better leverage its unique combination of global scale and local leadership. Santander aims to be the best open financial services platform providing services to individuals, SMEs, corporates, financial institutions and governments. The bank’s purpose is to help people and businesses prosper in a simple, personal and fair way. Santander is building a more responsible bank and has made a number of commitments to support this objective, including raising €220 billion in green financing between 2019 and 2030. In the first quarter of 2024, Banco Santander had €1.3 trillion in total funds, 166 million customers, 8,400 branches and 211,000 employees.
