12 Mar
CyberArk Engineer
Vacancy expired!
- Using your expertise in CyberArk and background in identity and privilege access management, evaluate/update and make recommendation for CyberArk installation.
- Review, update, install, and train others on the features and best practices of CyberArk, creating a secure, sustainable and highly automated environment that meets requirements across all on-prem and cloud-based footprints.
- Identify the tools and techniques to translate needs and future goals into a plan that will enable secure and effective solutions.
- Apply expertise in the installation and configuration of the CyberArk platform, including conducting routine solution maintenance, monitoring the health of the platform, and conducting daily proactive monitoring of the CyberArk production environment.
- Automate processes across the CyberArk products
- Monitor CyberArk and support any break/fix, upgrades, patches, and performance or integration related issues. Work with development teams on integration with CyberArk
- Create automated periodic reports as required, and address any discrepancies found.
- Support critical CyberArk functions, including maintenance, patch identification and publication, and upgrades of CyberArk and related modules.
- Maintain responsibility for privilege user incident management support, user acceptance testing of privilege accounts, load testing, performance testing, and validation testing of the CyberArk solution.
- Maintain & support CyberArk on a daily basis from a tier 3 standpoint, troubleshooting Vault, CPM, PTA, PSM, and PVWA issues as required
- Resolution of tier 3 trouble tickets including password rotations, password malfunctions, account creations, account changes, scheduling.
- Installation of CyberArk vault including multiple CPMs, PVWAs, and as built documentation
- Collaborate to define access control, user entitlements, and user access policy management
- Collaborate to develop and execute overall project plan and timelines for key deliverables
- CyberArk Expertise: CyberArk administration, configuration, implementations, designs, and troubleshooting
- Minimum of 10 years’ experience; 7-10 years in Security and Identity Management, and 5+ years in CyberArk
- Experience in CyberArk toolset, including Vault, CPM, PVWA, PSM, and PTA
- Experience in Privileged Account Management with CyberArk PIM Administration
- Extensive experience in implementation and integration of Cyber-Ark's Privileged Identity Management (PIM) Suite
- Advanced experience with script development (PowerShell/Python preferred)
- Experience with PAM tasks – Defining Access Control, User Entitlements, Manage Applications Credentials, User Access Policy Management.
- Able to work with confidential and sensitive information, maintaining confidentiality.
- A high level of technical ability for diagnosis, troubleshooting and problem analysis with the ability to clearly communicate the results of problem analysis to business stakeholders, IT support teams, and network providers to quickly and effectively resolve issues.
- Technical competence in the following:
- PAM & PIM via CyberArk product suite
- CyberArk Administration/Development
- Security protocols such as LDAP-S, SAML, WS-Federation, SCIM, OAuth, and OIDC
- Component services & areas: domain design, DDNS, DHCP, Directory Services including directory services replication/synchronization, Kerberos, Active Directory compliance for Schema Extensions, DEA (Directory Enabled Applications), LDAP-S, AD integration security, federation services and Forest system context management for application services
- Adept at scripting in Python, PowerShell and/or one or more additional scripting languages
- Demonstrated current work experience engineering, customizing, and integrating IAM solutions such as Azure Active Directory, Active Roles, Duo, MIM, CyberArk, Duo, Okta, and Sailpoint
- Demonstrated organizational skills, attention to detail and ability to work both independently and as part of a team. As a senior member of the team, ability to work unsupervised, prioritize own workload, and mentor other team members as required is essential
- Comfortable in a global fast-paced enterprise team environment, with ability to adjust to changing priorities and schedules, and balance support and project work
- Customer service driven/focused with a proactive and positive can-do approach, demonstrating effective communication with multiple internal/external stakeholders in a global business environment
- BA or BS degree in an IT related field or an equivalent combination of formal education and applicable experience required
- Demonstrated excellent technical writing skills and project/program management experience
- IT Certifications including CyberArk Level 3 Sentry or Level 4 Guardian, Microsoft Certification specialization in Identity Management, CISSP, and ITIL v3 Foundations certifications
- International experience beneficial; multiple language skills a plus
Vacancy expired!