Senior Principal Software Engineer

companyDescription About CyberArk CyberArk, a Palo Alto Networks company, is the global leader in identity security, trusted by organizations around the world to secure human and machine identities in the modern enterprise. CyberArk’s AI-powered Identity Security Platform applies intelligent privilege controls to every identity with continuous threat prevention, detection and response across the identity lifecycle. With Identity Security, organizations can reduce operational and security risks by enabling zero trust and least privilege with complete visibility, empowering all users and identities, including workforce, IT, developers and machines, to securely access any resource, located anywhere, from everywhere. Learn more at cyberark.com. Copyright © 2026 CyberArk Software. All Rights Reserved. All other brand names, product names, or trademarks belong to their respective holders. jobDescription Job Profile – Senior Principal Software Engineer Responsibilities Design, implement, and maintain Identity & Access Management (IAM) solution architecture in public and private cloud environments. Define and implement guidelines for open identity standards (OAuth 2.0, OpenID Connect, SAML 2.0, and SSO). Continuously assess and evolve the overall cloud security posture. Lead data-driven security analytics, monitoring, and incident response. Promote proactive security concepts like threat hunting and threat modeling. Architect and champion secure identity solutions for autonomous AI agents, including implementing guardrails against prompt injection and data leakage. Core Skills 6+ years in Identity & Access Management and Information Security. 8+ years of hands-on experience securing enterprise applications in cloud technologies. Expertise in IAM protocols (OAuth 2.0, OpenID Connect, SAML 2.0) and access control mechanisms (SSO, RBAC, ABAC, MFA, RBA). Strong knowledge of Threat, Vulnerability, & Risk management, and Infrastructure security (WAFs, proxies, load balancers, network protocols). Development experience with Microservices and scripting languages (Python, PowerShell). Knowledge of SRE, DDoS mitigation, and key security standards (SANS Top 20, OWASP Top 10). Strong communication, leadership, problem-solving, and analytical skills. #LI-HK01 qualifications Preferred Skills Hands-on experience with major IAM products (e.g., SailPoint, Okta, Azure AD). Working knowledge of advanced identity protocols (SCIM2, FIDO2) and containers (Kubernetes). Experience with AI/ML, GenAI, and using AI for Security Analytics. Familiarity with authorization models (ReBAC) and security for autonomous AI agents and RAG architectures. AWS Certifications and experience implementing technology specifications/RFCs. Nice to have Skills Knowledge of security, privacy, and compliance standards (e.g., FISMA, HIPAA, GDPR). additionalInformation