Key skills
Workforce IdentityIAMIGA-liteSAMLOAuthOIDCMFA/SSOSCIMAD/LDAPREST APIsPostmanAWSAzurePythonPowerShellBashCollaborationCommunicationEntra IDOktaLDAPSSOSaaSSales
About this role
CyberArk, a Palo Alto Networks company, is the global leader in identity security, and they are seeking a Solutions Engineer who will serve as a Workforce Identity SME for the US West region. This role involves partnering with Sales Specialists to articulate CyberArk’s Workforce Identity & IGA value, guiding customers through evaluations, and designing secure, scalable architectures.
Responsibilities:
- Serve as the technical subject matter expert for Workforce IAM and IGA capabilities
- Lead high-impact demos, workshops, and proof-of-concepts
- Own technical discovery and map customer requirements to meaningful identity outcomes
- Advise customers on best practices around federation, lifecycle, governance, and compliance
- Help customers design integrations across cloud, SaaS, and hybrid environments
- Partner with Sales Specialists to drive opportunities from discovery through technical win
- Create reusable assets (demo flows, scripts, workflows) your peers can leverage
- Provide real-world field feedback to influence product direction
- Support marketing, webinars, and pipeline-generating activities as needed
Requirements:
- 3–5 years in Workforce Identity, IAM, IGA-lite, or Directory/SSO/Federation roles
- Strong understanding of SAML, OAuth, OIDC, WS-Fed, MFA/SSO, SCIM
- Experience with AD/LDAP and modern IDPs (Okta, Entra ID, CyberArk, etc.)
- Familiarity with governance concepts: certifications, workflows, lifecycle, least privilege
- Proficiency with REST APIs and tools like Postman or Bruno
- Ability to compare CyberArk's Identity portfolio to other identity vendors in the market
- Hands-on experience integrating cloud apps (AWS, Azure, SaaS)
- Ability to simplify complex identity concepts for technical and non-technical audiences
- Collaboration mindset — you share knowledge, document what you learn, and raise the bar
- MIS/CS degree, CISSP, or equivalent industry experience
- Ability to travel up to 30%
- Must live in—or be able to support—Mountain and Pacific time zone
- Scripting experience (Python, PowerShell, Bash) is a strong plus
- Bonus certifications: Okta Certified Professional, Microsoft Identity & Access Administrator, AWS Solutions Architect, CCSP or similar