Security Engineer – CyberArk Privileged Access Management

About the role

ANZ is looking for a Security Engineer to join its Security Initiatives & Identity Management team in Wellington. You will be responsible for maintaining and extending the CyberArk Privileged Access Management (PAM) platform, developing custom connectors, and automating onboarding and reporting processes.

Key responsibilities

• Maintain and enhance the CyberArk PAM solution, expanding its coverage across the organisation.
• Develop custom plugins and API‑based integrations for CyberArk CPM, PSM and PAS.
• Create and maintain automation scripts for onboarding, reporting and ongoing management of CyberArk.
• Collaborate with engineers, analysts, product owners and testers to design system changes, platform upgrades and onboarding procedures.
• Implement continuous delivery practices to accelerate delivery speed.
• Provide specialist advice, troubleshooting and strategic direction for CyberArk integrations.
• Engage with stakeholders to prioritise new integrations and identify improvement opportunities.
• Support maintenance activities such as patching and disaster‑recovery testing.

Required profile

• Strong scripting and automation experience, especially with PowerShell and Python.
• Solid understanding of Windows and Unix systems.
• Experience with application integration and secure coding practices.
• Ability to troubleshoot, reverse‑engineer and manage version control within an SDLC.
• Excellent communication and stakeholder‑management skills.

Required skills

• PowerShell (advanced)
• Python
• Bash / Shell scripting
• Windows and Unix operating systems
• CyberArk PAS, PSM and CPM
• CyberArk PowerShell module
• Vault
• CyberArk Plugin Generator Utility (PGU)
• IAM domain knowledge
• Monitoring tools: SCOM, Dynatrace, Splunk
• Version control and SDLC hygiene