Job Description
As a Cybersecurity professional focused on Privileged Access Management (PAM), you will act as a key liaison between business stakeholders, development teams, and security engineers to design and implement secure access and privileged identity management solutions.
You will translate business requirements and security policies into scalable technical solutions, with a strong focus on CyberArk and secrets management platforms.
Experience with CyberArk is preferred; candidates with BeyondTrust Password Safe/Password Vault experience will also be considered.
You will report to the PAM‐NHI IAM Leader and collaborate with cross‐functional teams to ensure authentication, authorization, and secrets management processes meet enterprise security standards and compliance requirements.
Responsibilities
Help communication between partners, development teams, and security engineers to provide privileged access management solutions
Help design and implement secure access and privileged identity management solutions
Translate requirements and security policies into scalable technical solutions for applications and APIs
Configure and maintain CyberArk components, including PVWA, CPM, PSM, Safes, Platforms, and privileged account onboarding
Support authentication and authorization mechanisms across systems and applications
Work with secrets management platforms, including CyberArk and HashiCorp Vault
Contribute to the integration of PAM solutions across on‐prem and cloud environments
Ensure authentication, authorization, and secrets management processes meet enterprise security standards and regulatory compliance requirements
Requirements
Bachelor's degree in Computer Science, Information Systems, or a related field,



or equivalent experience
+2 years in Cybersecurity with a strong focus on Privileged Access Management (CyberArk)
Hands‐on work with secrets management platforms (CyberArk and HashiCorp Vault)
Strong understanding of authentication and authorization mechanisms
Hands‐on work with CyberArk components, including PVWA, CPM, PSM, Safes, Platforms, and Privileged Account Onboarding
Experience with CyberArk is preferred; candidates with BeyondTrust Password Safe/Password Vault experience will also be considered
Preferred Qualifications
Working knowledge of HashiCorp Vault, including secret engines (KV, PKI, Transit), auth methods, and policies
Knowledge of privileged access management methodologies for on‐prem and cloud environments
Knowledge of authentication and authorization systems (Active Directory, OAuth2.0, OIDC, AWS IAM, AppRole, Kubernetes, LDAPS, Kerberos, Certificate)
Familiarity with Agile, Scrum, and DevOps practices
Ability to translate complex business needs into actionable technical requirements
Proficiency with tools such as Visio, Confluence, and JIRA
Familiarity with automation and configuration tools (SALT, Ansible, Terraform)
Exposure to cloud environments (AWS, Azure, or GCP)
Benefits
Comprehensive mindfulness programs with a premium membership to Calm
Volunteer Paid Time off available after 6 months of employment for eligible employees
Company volunteer and donation matching program – match volunteer hours or personal cash donations to an eligible charity
Employee Assistance Program
Personalized wellbeing programs through the OnTrack program
On‐demand digital course library for professional development
Other local benefits
#J-*****-Ljbffr

📌 Pam Security Analyst (Monterrey)
🏢 Rockwell Automation
📍 Monterrey