PAM CYBERARK ENGINEER- SDS QRO

AI in this role

Architect, deploy, and maintain CyberArk privileged access security solutions and automate onboarding processes.

cyberarkpowershellpythonawsazuregcp

privileged-access-managementsecurity-architectureidentity-and-access-managementautomation

Country: Mexico

Santander Digital Services – Privileged Access Management (PAM) Senior CyberArk Engineer.

Location: Querétaro or CDMX.

Overview

The Senior CyberArk Engineer is responsible for architecting, deploying, and maintaining privileged access security solutions using the CyberArk suite. This role ensures the protection of critical systems, credentials, and privileged accounts while aligning with security best practices and regulatory requirements. The ideal candidate possesses deep hands-on expertise with CyberArk Privileged Access Security (PAS), strong security engineering skills, and experience operating in large, complex environments.

Key Responsibilities

CyberArk Engineering & Administration

Design, deploy, configure, and maintain the full on-premises CyberArk Privileged Access Security (PAS) suite, including:
- Enterprise Password Vault (EPV)
- Privileged Session Manager (PSM)
- Privileged Session Manager for SSH (PSM-SSH)
- Central Policy Manager (CPM)
- Privileged Threat Analytics (PTA)
Implement and maintain CyberArk safes, platforms, policies, and connectors.
Integrate CyberArk with enterprise systems, including LDAP/AD, and SIEM ticketing systems, and cloud platforms (AWS, Azure, GCP).
Build and maintain custom connectors and plugins for applications and infrastructure.

Security Architecture & Governance

Develop and enforce privileged access policies and best practices.
Conduct threat modeling and ensure PAM alignment with regulatory frameworks (SOX, GLBA, NYDFS, etc.).
Review privileged access workflows and recommend improvements to strengthen security posture.

Automation & Continuous Improvement

Automate onboarding of privileged accounts, systems, and applications using REST APIs, PowerShell, Python, or similar tools.
Tune CPM/PSM performance, optimize vault operations, and improve automated credential rotation processes.
Implement continuous monitoring, alerting, and reporting mechanisms.

Operations & Support

Serve as a subject matter expert (SME) for CyberArk-related issues across infrastructure, development, and security teams.
Troubleshoot complex vaulting, credential, and session management issues.
Perform CyberArk upgrades, patching, health checks, and system hardening.
Participate in on-call rotations and provide escalation-level support.

Collaboration & Training

Work closely with IAM, security operations, risk, and compliance stakeholders.
Provide guidance and mentorship to junior engineers.
Develop documentation, runbooks, and best practice guides.

Required Qualifications

5–8+ years of experience in Information Security or Identity and Access Management.
3–5+ years of hands-on CyberArk engineering experience.
Strong understanding of privileged access management principles.
Proficiency with:
- PowerShell, Python, or equivalent scripting languages
- Windows and Linux administration
- Active Directory, LDAP, MFA integrations
- Networking basics (firewalls, proxies, DNS)
Experience supporting large-scale, high-availability PAM environments.

Preferred Qualifications

CyberArk Defender, Sentry, or Guardian certifications.
Experience with:
- Threat and vulnerability management related to privileged access
Background in regulated industries (finance, healthcare, government).

Core Competencies

Strong analytical, problem-solving, and debugging skills.
Excellent communication and documentation abilities.
Ability to lead complex projects with minimal supervision.
High attention to detail and commitment to security best practices.

How we rate this

PAM CYBERARK ENGINEER- SDS QRO at Santander rates 0 out of 100 for how much of the daily work is AI. That makes it Little AI (AI Level 1 of 4). The level is about AI in the job, not seniority.

Classification

Little AI. AI is not part of the work.

●●●● Builds AI80 to 100
●●●○ Works on AI60 to 79
●●○○ Uses AI40 to 59
●○○○ Little AI0 to 39

Levels come from how often the tools, models and workflows of the role are named in the posting itself. Open the description and count.

Key facts

PAM CYBERARK ENGINEER- SDS QRO is an open job at Santander.
Level rates this role AI Level 1 of 4: Little AI.
The role is based in OFNA TECH AND OPER QRO.
The job was posted on September 3, 2026.
Seniority: senior.
Applications are handled by Santander. Apply on Santander

Prepare for this job

A free preview built only from this posting: what it asks for, what you could be asked in an interview, and how to adjust your resume.

Skills and AI tools this role asks for

Privileged Access ManagementSecurity ArchitectureIdentity And Access ManagementAutomationCyberarkPowershellPythonAWS

Questions you could be asked

Tell me about a project where privileged access management was part of your work. What did you do?
Tell me about a project where security architecture was part of your work. What did you do?
Tell me about a project where identity and access management was part of your work. What did you do?
Tell me about a project where automation was part of your work. What did you do?
Walk me through how you've used Cyberark in your day-to-day work.

Adapt your resume

List these exact terms on your resume: Privileged Access Management, Security Architecture, Identity And Access Management, Automation, and Cyberark. An applicant tracking system matches the wording, not the idea.
Attach one line of real, concrete experience to at least one of them — a tool named with nothing behind it rarely survives a human read.

Want an expert to read your CV for this job?

Free. Send your CV and the role you want next. We reply by email within 2 to 4 business days.

Get a free CV review