Years of Experience |
- 7 to 8 years of experience in operations OR deployment & implementation of Privileged Access Management using CyberArk solution for large scale customers across various industry verticals.
|
General Description |
- Develop and execute strategies for implementing and managing CyberArk PAM solutions to meet the business needs of our clients.
- Responsible for the ongoing management and/or improvement of activities related to the Privileged Access Management systems particularly CyberArk, including installation, upgrade and patching of the CyberArk application.
- Architect, design, and implement secure and scalable access management solutions using CyberArk.
- Provide technical leadership in the areas of Privilege access management and ensure alignment with best practices and security standards.
- Collaborate with clients to understand their specific requirements, translate them into technical solutions, and provide consultation.
- Evaluate existing systems and recommend improvements or migrations to CyberArk PAM where applicable.
- Stay up to date with the latest PAM features, security trends, and best practices to ensure clients' solutions are cutting-edge and secure.
- Collaborate with cross-functional teams, including developers, engineers, and project managers, to deliver successful CyberArk implementations.
- Engineer skills for new connectors installation, existing connectors upgrade and system troubleshooting
- Development skills for integration and automation
- Account management skills to collaborate with IGA and SSO teams for day to day privileged access management, at last analytical and documentation skills to continually document the work instructions and new requirements.
|
Technical Requirements |
- Should have experience with Cyber-Ark Privileged Access Security (PAS) suite.
- Management/Administration of Privileged Access Management tool.
- Managing and maintaining the CyberArk PAM platform (Vault, PSM, PVWA, CPM, PSM for SSH, AD Bridge).
- Management of day-to-day CyberArk management operations.
- Maintains contact with vendors regarding security system updates, products, and maintenance agreements for Privileged Access Management tool.
- Reviews solutions of recommended products, applications, and infrastructure to uphold Customer's security measures as it relates to Identity and Access Management.
- Monitor logs and events for Windows, UNIX, and User identity management platforms to provide views of misuse or malicious activities.
- Responsible for privileged User account administration of various Windows and UNIX accounts using CyberArk components.
- Integrating various platforms with CyberArk, such as Windows servers, UNIX servers, Databases, and networking Devices.
- Perform health check monitoring on all CyberArk severs to ensure consistent availability of system to end user.
- Creating and Managing Safes, platforms, and Owners.
- CPM policies management or redistribution.
- Implementing the Password Upload Utility.
- Auditing Accounts and work on various reports, user s server login issues and user permission issues as per requirements.
- Basic knowledge of SQL, PLSQL, UNIX, Active Director, Windows etc.
- Advanced knowledge of windows/VMware administration.
- Advanced knowledge of Windows Cluster Server.
- Experience in the use of CyberArk PACLI to automate tasks related to user and safe management.
- Experience using LDAP, Active Directory.
- Experience in Windows and Linux operating systems with PAM Solution
- Exposure to virtual environments with experience in integrating ESX, ESX(i) hosts with the PAM solution.
- SIEM systems, ticketing systems such as Remedy, enterprise monitoring and alerting using SNMP.
- Understanding of SSH and Windows RDP.
- Hands on experience in:
- On Prim CyberArk and CPC
- Experience in secret management (be more specific credential provider) area.
- Expertise in CCP (central credential provider) for global web service based application integration and CP (credential provider) also CPM agent based integration for some COTS applications. Version and the upgradation activity, any work experience
- Plugin and connector environment
- Integrations to automate service account management.
- Good scripting and API development experience.
- Build automate process for infrastructure account onboarding, data reporting, etc.(GUI or PowerShell)
- Debugging skills
- Secure Remote connection configuration activity experience
- Splunk integration
- Work experience in static & dynamic manage level
- Experience in app locker
- Proxy and reverse proxy configuration work experience
- Service management activities in PSM
- Rotate password handling activity depends on Service account and application need work scenario
- worked in manually or automatic onboard account
|
Soft Skills |
- Excellent communication and presentation skills, with the ability to explain complex technical concepts to non-technical stakeholders.
- Strong problem-solving and critical thinking skills.
- Exceptional project management and organizational abilities.
- Team collaboration and leadership skills.
- Client-focused approach with a commitment to delivering exceptional customer service.
|
Certifications (Good to have) |
- Possession of relevant CyberArk certifications.
- CyberArk Certified Trustee.
- CyberArk Certified Defender.
|
Educational Qualifications |
- University degree in IT or/and IT Security
|