- Sydney or Melbourne
- Join Rest's Information Security team
Established in 1988, Rest is one of Australia’s largest profit-to-member superannuation funds.
We support more than two million members, with around $100 billion of funds under management and are recognised as a responsible investment leader*. We believe when members understand and engage with their super, they’re more likely to get a better retirement outcome.
Everything we do at Rest is underpinned by our values and behaviours, we want to Be Daring, Keep it Simple, Take Action and Have Grit. To put it simply we want our people to thrive and love the work they do.
As an Privileged Access Engineer, you will play a critical role in designing, implementing, and managing Privilege Identity Access Management solutions across the Rest environment. Your primary focus will be on deploying and maintaining CyberArk Privileged Cloud solution to secure privileged access throughout the enterprise.
This role requires a proactive and security-focused mindset, working closely with IT, security and the business to mitigate risks, enforce compliance, and optimize privileged access controls. You’ll contribute to the strategic evolution of Rest's IAM landscape, ensuring that our systems, applications, and data remain protected against emerging threats.
- Design, implement, and manage CyberArk Privileged Cloud solution to secure privileged accounts and sensitive credentials across the enterprise.
- Lead the installation, configuration, and maintenance of CyberArk privileged Cloud components including Vault, PAS, PVWA, CPM, PSM, and PTA.
- Monitor and maintain daily operations of PAM systems to ensure high availability, optimal performance, and robust security of privileged access.
- Oversee the full lifecycle management of privileged accounts—provisioning, deprovisioning, credential rotation, and auditing—across platforms such as CyberArk Privilege Cloud, Microsoft Entra ID, and SailPoint Identity Security Cloud (ISC).
- Conduct regular privileged access reviews, ensuring strict adherence to the principle of least privilege and compliance requirements.
- Investigate and respond to security incidents or anomalies related to privileged access, working closely
- with the incident response team for swift resolution and root cause analysis.
- Partner with IT and application teams to integrate PAM solutions seamlessly with critical enterprise systems and tools.
- Develop and enforce policies governing privileged access in line with security frameworks and compliance standards.
- Manage patching, upgrades, and troubleshooting of all CyberArk components, ensuring a secure and stable environment.
- Provide technical expertise, guidance, and training to internal teams and end-users on best practices in identity and access management.
- Perform regular audits and generate detailed reports on privileged account usage, policy violations, and compliance status.
- Identify and resolve issues related to authentication, access controls, and application integration within the broader identity ecosystem.
- Maintain comprehensive documentation of configurations, processes, and operational best practices across all supported identity platforms.