Solution Engineer IAM, IGA, SME - West

About CyberArk:
CyberArk (NASDAQ: CYBR), is the global leader in Identity Security. Centered on privileged access management, CyberArk provides the most comprehensive security offering for any identity – human or machine – across business applications, distributed workforces, hybrid cloud workloads and throughout the DevOps lifecycle. The world’s leading organizations trust CyberArk to help secure their most critical assets. To learn more about CyberArk, visit our CyberArk blogs or follow us on X, LinkedIn or Facebook.

CyberArk is seeking a Solutions Engineer who will serve as a Workforce Identity SME for the US West region. This team is CyberArk’s dedicated Workforce Identity specialist group—SEs who go deeper than traditional presales roles across IAM, IGA-lite, governance workflows, and identity integrations. You’ll be the technical go-to in your territory, partnering with Sales Specialists to articulate CyberArk’s Workforce Identity & IGA value, guide customers through evaluations, and design secure, scalable architectures. This is not a generalist SE role. This role is for someone who wants to own Workforce Identity technically, become the trusted advisor for the region, and contribute to shaping how CyberArk delivers identity outcomes.

What You’ll Do

As a Workforce Identity SME, you will:

• Serve as the technical subject matter expert for Workforce IAM and IGA capabilities
• Lead high-impact demos, workshops, and proof-of-concepts
• Own technical discovery and map customer requirements to meaningful identity outcomes
• Advise customers on best practices around federation, lifecycle, governance, and compliance
• Help customers design integrations across cloud, SaaS, and hybrid environments
• Partner with Sales Specialists to drive opportunities from discovery through technical win
• Create reusable assets (demo flows, scripts, workflows) your peers can leverage
• Provide real-world field feedback to influence product direction
• Support marketing, webinars, and pipeline-generating activities as needed

#LI-CD1

• 3–5 years in Workforce Identity, IAM, IGA-lite, or Directory/SSO/Federation roles
• Strong understanding of SAML, OAuth, OIDC, WS-Fed, MFA/SSO, SCIM
• Experience with AD/LDAP and modern IDPs (Okta, Entra ID, CyberArk, etc.)
• Familiarity with governance concepts: certifications, workflows, lifecycle, least privilege
• Proficiency with REST APIs and tools like Postman or Bruno
• Ability to compare CyberArk’s Identity portfolio to other identity vendors in the market
• Hands-on experience integrating cloud apps (AWS, Azure, SaaS)
• Scripting experience (Python, PowerShell, Bash) is a strong plus
• Ability to simplify complex identity concepts for technical and non-technical audiences
• Collaboration mindset — you share knowledge, document what you learn, and raise the bar

Requirements

• MIS/CS degree, CISSP, or equivalent industry experience
• Ability to travel up to 30%
• Must live in—or be able to support—Mountain and Pacific time zone

• customers (CA/OR/WA/AK/HI/CO/UT/AZ/NM)
• Bonus certifications:
  • Okta Certified Professional
  • Microsoft Identity & Access Administrator
  • AWS Solutions Architect
  • CCSP or similar

CyberArk is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, creed, sex, sexual orientation, gender identity, national origin, disability, or protected Veteran status. 

We are unable to sponsor or take over sponsorship of employment Visa at this time.

The salary range for this position is $107,000 – $158,000/year, plus commissions or discretionary bonus, which will be based on the employee’s performance. Base pay may also vary considerably depending on job-related knowledge, skills, and experience. The compensation package includes a wide range of medical, dental, vision, financial, and other benefits.