|
Years of Experience
|
- 8+ years of relevant experience in CyberArk Implementation – Design & Architecture.
|
|
General Description
|
- Creating and implementing strategies for managing privileged access, designing solutions, and ensuring the secure storage and retrieval of sensitive credentials.
- Demonstrating in-depth knowledge of CyberArk products, including the Enterprise Password Vault, Privileged Session Manager, and other related tools.
- Overseeing the installation, configuration, and integration of CyberArk components to safeguard critical systems and data.
- Engage with different stakeholders via workshops, etc. for all the design level discussions and prepare design documents.
- Developing and enforcing security policies, access controls, and privileged access management procedures to mitigate risks.
- Identifying vulnerabilities and potential threats, and implementing measures to protect against unauthorized access.
- Maintaining detailed records, reports, and documentation of CyberArk configurations and activities.
- Ensuring that CyberArk solutions are up-to-date and providing support for system upgrades and maintenance.
- Interact with different teams to gather the required data for integration/ on-boarding of target systems /devices.
- Resolving technical issues and providing expert guidance to address security challenges.
|
|
Skills / Technical Requirements
|
- Expertise in providing PAM solutions using CyberArk.
- Should have experience on CyberArk from 11.xx onwards
- Design deploy & support high-performance, high-availability PAM environment with any number of target end points, creating workflows, custom connectors, policies.
- Perform enhancement in CyberArk Core PAS
- On-board target systems onto CyberArk Core PAS.
- Support migration from Centrify to CyberArk Core PAS.
- Integrate Legacy IDM instances with CyberArk to manage human accounts.
- Support Redhat migration
- Migrate CyberArk shared and pooled accounts.
- Create named tiered accounts model and onboard name tiered accounts in CyberArk and assign them to correct IDM User Groups
- Work on Migration model – Pooled Accounts to Named tiered account.
- Perform Centrify Access Data Analysis to yield the current access data model and merge into the new Tiered Access Model.
- Should be capable to deploy/install/configure CyberArk components Vault, CPM, PVWA, PSM, PSMP and AIM as per the client requirements.
- Hands-on experience or knowledge on Configuring PTA, EPM.
- Integrating various platforms with CyberArk such as Windows, UNIX, Databases and network devices, SSH Keys, SAP etc.
- Creating and managing Safes, platforms and owners.
- Should have knowledge on Password upload utility and PACLI.
- Experience on integrating CyberArk solution with LDAP, SIEM SNMP and other identity management systems.
- Strong scripting skills, often using languages like PowerShell, Python, or Shell scripting, to automate tasks and customize CyberArk solutions.
- Knowledge of regulatory requirements and industry standards related to privileged access management, such as NIST, CIS, and GDPR.
- Experience with security monitoring tools and integrating CyberArk with Security Information and Event Management (SIEM) systems.
|
|
Soft Skills
|
- Excellent Verbal and written communication skills in English.
- Ability to present solutions to clients remotely and in person if needed.
- Good documentation skills that will enable creation of design documents for the technical solutions proposed.
- Excellent problem-solving skills.
- Good collaboration skills in working with virtual and distributed teams.
|
|
Certifications
|
- Possession of relevant CyberArk certifications such as CyberArk Certified Delivery Engineer (CDE) or CyberArk Certified Trustee (CTP) can be a significant advantage.
|
|
Educational Qualifications
|
- University degree in IT or/and IT Security
|