LEAD CyberArk Consultant

Role: - CyberArk Consultant with LEAD SKILLS L3

Location: - Alpharetta, GA Day 1 Onsite

Work Authorization: & GC

Experience:

7+ years of experience in Information Technology, with at least 5 years in a senior role leading PAM- CyberArk/ IAM initiatives.

Technical Knowledge:

Deep technical knowledge of PAM, IAM, security principles, and privilege risk mitigation.

Cloud & On-Premises Experience:

Hands-on experience with PAM solutions in both cloud (e.g., Azure AD Privileged Identity Management, AWS Secrets Manager) and on-premises environments.

PAM Platforms:

Experience with specific enterprise PAM solutions such as CyberArk

DevOps Mindset:

A strong understanding of DevOps and SecOps practices and their impact on security architecture.

Regulatory Knowledge:

Familiarity with PAM-related regulations like PCI DSS, HIPAA, and GDPR is often required, especially in regulated industries.

Soft Skills:

Exceptional written and verbal communication skills, the ability to think strategically, and proficiency in project leadership

Years of Experience:

7+ years of experience in Information Technology, with at least 5 years in a senior role leading PAM- CyberArk/ IAM initiatives.

General Description

Creating and implementing strategies for managing privileged access, designing solutions, and ensuring the secure storage and retrieval of sensitive credentials.

Demonstrating in-depth knowledge of CyberArk products, including the Enterprise Password Vault, Privileged Session Manager, and other related tools.

Overseeing the installation, configuration, and integration of CyberArk components to safeguard critical systems and data.

Engage with different stakeholders via workshops, etc. for all the design level discussions and prepare design documents.

Developing and enforcing security policies, access controls, and privileged access management procedures to mitigate risks.

Identifying vulnerabilities and potential threats, and implementing measures to protect against unauthorized access.

Maintaining detailed records, reports, and documentation of CyberArk configurations and activities.

Ensuring that CyberArk solutions are up-to-date and providing support for system upgrades and maintenance.

Interact with different teams to gather the required data for integration/ on-boarding of target systems /devices.

Resolving technical issues and providing expert guidance to address security challenges.

Skills / Technical Requirements:

Expertise in providing PAM solutions using CyberArk.

Should have experience on CyberArk from 11.xx onwards

Design deploy & support high-performance, high-availability PAM environment with any number of target end points, creating workflows, custom connectors, policies.

Perform enhancement in CyberArk Core PAS

On-board target systems onto CyberArk Core PAS.

Support migration from Centrify to CyberArk Core PAS.

Integrate Legacy IDM instances with CyberArk to manage human accounts.

Support Redhat migration

Migrate CyberArk shared and pooled accounts.

Create named tiered accounts model and onboard name tiered accounts in CyberArk and assign them to correct IDM User Groups

Work on Migration model - Pooled Accounts to Named tiered account.

Perform Centrify Access Data Analysis to yield the current access data model and merge into the new Tiered Access Model.

Should be capable to deploy/install/configure CyberArk components Vault, CPM, PVWA, PSM, PSMP and AIM as per the client requirements.

Hands-on experience or knowledge on Configuring PTA, EPM.

Integrating various platforms with CyberArk such as Windows, UNIX, Databases and network devices, SSH Keys, SAP etc.

Creating and managing Safes, platforms and owners.

Should have knowledge on Password upload utility and PACLI.

Experience on integrating CyberArk solution with LDAP, SIEM SNMP and other identity management systems.

Strong scripting skills, often using languages like PowerShell, Python, or Shell scripting, to automate tasks and customize CyberArk solutions.

Knowledge of regulatory requirements and industry standards related to privileged access management, such as NIST, CIS, and GDPR.

Experience with security monitoring tools and integrating CyberArk with Security Information and Event Management (SIEM) systems.

Certifications:

Possession of relevant CyberArk certifications such as CyberArk Certified Delivery Engineer (CDE) or CyberArk Certified Trustee (CTP) can be a significant advantage.

Educational Qualifications

University degree in IT or/and IT Security