Job DescriptionAs a Cybersecurity professional focused on Privileged Access Management (PAM), you will act as a key liaison between business stakeholders, development teams, and security engineers to design and implement secure access and privileged identity management solutions.You will translate business requirements and security policies into scalable technical solutions, with a strong focus on CyberArk and secrets management platforms.Experience with CyberArk is preferred; candidates with BeyondTrust Password Safe/Password Vault experience will also be considered.You will report to the PAM‐NHI IAM Leader and collaborate with cross‐functional teams to ensure authentication, authorization, and secrets management processes meet enterprise security standards and compliance requirements.ResponsibilitiesHelp communication between partners, development teams, and security engineers to provide privileged access management solutionsHelp design and implement secure access and privileged identity management solutionsTranslate requirements and security policies into scalable technical solutions for applications and APIsConfigure and maintain CyberArk components, including PVWA, CPM, PSM, Safes, Platforms, and privileged account onboardingSupport authentication and authorization mechanisms across systems and applicationsWork with secrets management platforms, including CyberArk and HashiCorp VaultContribute to the integration of PAM solutions across on‐prem and cloud environmentsEnsure authentication, authorization, and secrets management processes meet enterprise security standards and regulatory compliance requirementsRequirementsBachelor's degree in Computer Science, Information Systems,



or a related field, or equivalent experience+2 years in Cybersecurity with a strong focus on Privileged Access Management (CyberArk)Hands‐on work with secrets management platforms (CyberArk and HashiCorp Vault)Strong understanding of authentication and authorization mechanismsHands‐on work with CyberArk components, including PVWA, CPM, PSM, Safes, Platforms, and Privileged Account OnboardingExperience with CyberArk is preferred; candidates with BeyondTrust Password Safe/Password Vault experience will also be consideredPreferred QualificationsWorking knowledge of HashiCorp Vault, including secret engines (KV, PKI, Transit), auth methods, and policiesKnowledge of privileged access management methodologies for on‐prem and cloud environmentsKnowledge of authentication and authorization systems (Active Directory, OAuth2.0, OIDC, AWS IAM, AppRole, Kubernetes, LDAPS, Kerberos, Certificate)Familiarity with Agile, Scrum, and DevOps practicesAbility to translate complex business needs into actionable technical requirementsProficiency with tools such as Visio, Confluence, and JIRAFamiliarity with automation and configuration tools (SALT, Ansible, Terraform)Exposure to cloud environments (AWS, Azure, or GCP)BenefitsComprehensive mindfulness programs with a premium membership to CalmVolunteer Paid Time off available after 6 months of employment for eligible employeesCompany volunteer and donation matching program – match volunteer hours or personal cash donations to an eligible charityEmployee Assistance ProgramPersonalized wellbeing programs through the OnTrack programOn‐demand digital course library for professional developmentOther local benefits#J-*****-Ljbffr

📌 Pam Security Analyst (Monterrey)
🏢 Rockwell Automation
📍 Monterrey