Security Support Analyst – Privileged Access Management

About the role

The Privileged Access Management Analyst will protect Apex Group’s critical systems by delivering end‑to‑end PAM services. You will own the CyberArk platform, onboard privileged accounts across applications, infrastructure and cloud, and ensure that access controls remain secure, compliant and operationally effective.

Key responsibilities

• Administer and support the CyberArk PAM suite (PVWA, CPM, PSM, Safes, Platforms, Secure Cloud Access, Endpoint Privilege Manager) to maintain platform stability and availability.
• Handle day‑to‑day PAM operations, including service requests, privileged account lifecycle activities, user support and escalation management.
• Monitor platform health, password rotation, reconciliation and session auditing to meet service‑level agreements.
• Drive onboarding of privileged accounts for applications, infrastructure and cloud environments, ensuring alignment with Zero‑Trust and regulatory requirements.
• Act as a trusted advisor to business units, application owners and cloud engineering teams, promoting secure access practices.
• Collaborate with Security, Risk, Compliance, Audit and Identity Governance teams to enforce policies and prepare for audits.
• Identify and implement automation opportunities to expand PAM coverage and improve efficiency.

Required profile

• Proven experience managing a CyberArk PAM environment in a large, complex organization.
• Strong understanding of privileged account lifecycle, password management and session monitoring.
• Ability to work closely with cross‑functional stakeholders and translate security requirements into practical solutions.
• Knowledge of Zero‑Trust principles and regulatory compliance related to privileged access.
• Continuous‑improvement mindset with a focus on automation and audit readiness.

Required skills

• CyberArk PAM platform (PVWA, CPM, PSM, Safes, Platforms, Secure Cloud Access, Endpoint Privilege Manager).
• Privileged Access Management (PAM) processes and best practices.
• Password rotation and reconciliation.
• Session monitoring and auditing.
• Cloud platforms (e.g., AWS, Azure, GCP) privileged access controls.