Privileged Access Management (PAM) Analyst
Leading Utilities Organization, Chandler, AZ, United States
Privileged Access Management (PAM) Analyst
Location: Chandler, AZ
Duration: 12 months (possibility to extend or convert)
This role is responsible for managing a high volume of customer requests (300+ JIRA tickets per month) related to privileged account onboarding and password vaulting in CyberArk.
The analyst will review, validate, and determine eligibility of service accounts for CyberArk vaulting based on predefined criteria, cross-referencing multiple data sources and following documented procedures.
Daily work includes performing detailed analysis, troubleshooting issues, ensuring policy compliance, and supporting audit requirements.
Manage and prioritize 300+ monthly JIRA tickets, ensuring timely and compliant processing.
Review submitted service accounts, validate eligibility for CyberArk vaulting, and ensure correct classification and documentation.
Perform password vaulting operations in CyberArk, including securing privileged passwords (domain admin, root, service accounts), automatic password rotation and lifecycle management, access control and permissions validation, logging and audit evidence capture, and integrating accounts with servers, applications, and DevOps tooling.
Cross-reference multiple source files, internal data repositories, and procedural documents to validate account information before onboarding.
Troubleshoot issues related to CyberArk onboarding, access, policies, session failures, or account synchronization.
Support reporting and metrics needs, including Tableau dashboards and Excel-based analysis.
Contribute to continuous improvement of vaulting procedures, documentation, and workflow efficiency.
This position requires strong operational discipline, excellent attention to detail, and the ability to navigate complex IAM workflows while partnering with internal customers.
Work a mandatory hybrid schedule of 3 days in office (6 AM - 3 PM AZ time).
Required Qualifications:
4+ years of Information Security Analysis or equivalent experience (IAM, PAM, Cybersecurity Operations, etc.).
Strong understanding of password vaulting concepts, including secure storage of privileged passwords, automated rotation, just-in-time and least privilege access control, audit logging, compliance tracking, and credential injection workflows.
Experience with IAM / PAM platforms such as CyberArk, HashiCorp Vault, or similar tools.
Advanced Excel skills (VLOOKUP, Power Query, data connections) and experience creating polished PowerPoint summaries.
Familiarity with Tableau for reporting, dashboards, and data visualization.
Strong attention to detail, analytical mindset, and ability to follow structured workflows and documented processes.
Comfort working in a high-volume, process-driven operational environment.
Ability to identify inefficiencies and recommend process improvements.
Hands-on experience with CyberArk (PAM, password vaulting, onboarding, rotation, policy enforcement) is highly preferred.
Understanding of compliance frameworks related to PAM (SOX, FFIEC, ISO controls, etc.) is a plus.
Experience working in a team-oriented, collaborative environment.
Proven analytical and problem-solving abilities.
Strong interpersonal, written, and oral communication skills.
Ability to prioritize and execute tasks in a high-pressure environment and make sound decisions under tight deadlines.
Highly self-motivated and directed.
Strong organizational skills.
Keen attention to detail.
Strong customer service orientation.
Location: Chandler, AZ
Duration: 12 months (possibility to extend or convert)
This role is responsible for managing a high volume of customer requests (300+ JIRA tickets per month) related to privileged account onboarding and password vaulting in CyberArk.
The analyst will review, validate, and determine eligibility of service accounts for CyberArk vaulting based on predefined criteria, cross-referencing multiple data sources and following documented procedures.
Daily work includes performing detailed analysis, troubleshooting issues, ensuring policy compliance, and supporting audit requirements.
Manage and prioritize 300+ monthly JIRA tickets, ensuring timely and compliant processing.
Review submitted service accounts, validate eligibility for CyberArk vaulting, and ensure correct classification and documentation.
Perform password vaulting operations in CyberArk, including securing privileged passwords (domain admin, root, service accounts), automatic password rotation and lifecycle management, access control and permissions validation, logging and audit evidence capture, and integrating accounts with servers, applications, and DevOps tooling.
Cross-reference multiple source files, internal data repositories, and procedural documents to validate account information before onboarding.
Troubleshoot issues related to CyberArk onboarding, access, policies, session failures, or account synchronization.
Support reporting and metrics needs, including Tableau dashboards and Excel-based analysis.
Contribute to continuous improvement of vaulting procedures, documentation, and workflow efficiency.
This position requires strong operational discipline, excellent attention to detail, and the ability to navigate complex IAM workflows while partnering with internal customers.
Work a mandatory hybrid schedule of 3 days in office (6 AM - 3 PM AZ time).
Required Qualifications:
4+ years of Information Security Analysis or equivalent experience (IAM, PAM, Cybersecurity Operations, etc.).
Strong understanding of password vaulting concepts, including secure storage of privileged passwords, automated rotation, just-in-time and least privilege access control, audit logging, compliance tracking, and credential injection workflows.
Experience with IAM / PAM platforms such as CyberArk, HashiCorp Vault, or similar tools.
Advanced Excel skills (VLOOKUP, Power Query, data connections) and experience creating polished PowerPoint summaries.
Familiarity with Tableau for reporting, dashboards, and data visualization.
Strong attention to detail, analytical mindset, and ability to follow structured workflows and documented processes.
Comfort working in a high-volume, process-driven operational environment.
Ability to identify inefficiencies and recommend process improvements.
Hands-on experience with CyberArk (PAM, password vaulting, onboarding, rotation, policy enforcement) is highly preferred.
Understanding of compliance frameworks related to PAM (SOX, FFIEC, ISO controls, etc.) is a plus.
Experience working in a team-oriented, collaborative environment.
Proven analytical and problem-solving abilities.
Strong interpersonal, written, and oral communication skills.
Ability to prioritize and execute tasks in a high-pressure environment and make sound decisions under tight deadlines.
Highly self-motivated and directed.
Strong organizational skills.
Keen attention to detail.
Strong customer service orientation.