Senior CyberArk Engineer (Cybersecurity)

Location: Querétaro, Mexico

Company

hirify.global operates in the financial services industry and requires enterprise-grade privileged access security.

What you will do

• Architect, deploy, configure, and maintain the on-premises CyberArk Privileged Access Security suite, including EPV, PSM, PSM-SSH, CPM, and PTA.
• Implement safes, platforms, policies, connectors, and custom plugins for applications and infrastructure.
• Integrate CyberArk with LDAP/Active Directory, SIEM and ticketing systems, and AWS, Azure, and GCP.
• Automate privileged account onboarding, credential rotation, monitoring, alerting, and reporting using REST APIs, PowerShell, and Python.
• Perform upgrades, patching, health checks, hardening, performance tuning, and escalation-level troubleshooting.
• Collaborate with IAM, security operations, risk, compliance, infrastructure, and development teams while mentoring junior engineers.

Requirements

• 5–8+ years of experience in information security or identity and access management.
• 3–5+ years of hands-on CyberArk engineering experience.
• Strong knowledge of privileged access management principles and experience with large-scale, high-availability PAM environments.
• Proficiency with PowerShell, Python or equivalent scripting, Windows and Linux administration, Active Directory, LDAP, and MFA integrations.
• Understanding of networking fundamentals, including firewalls, proxies, and DNS.
• Strong analytical, debugging, communication, documentation, and project leadership skills.

Nice to have

• CyberArk Defender, Sentry, or Guardian certification.
• Experience with privileged-access threat and vulnerability management.
• Background in regulated industries such as finance, healthcare, or government.

Culture & Benefits

• Full-time employment with participation in on-call rotations.
• Work includes collaboration with security, risk, compliance, infrastructure, and development stakeholders.
• Focus on security best practices, regulatory frameworks, documentation, runbooks, and continuous improvement.