CyberArk Consultant L3

Years of Experience

6 years of relevant experience in CyberArk Implementation - Design & Architecture.

General Description

Creating and implementing strategies for managing privileged access, designing solutions, and ensuring the secure storage and retrieval of sensitive credentials.

Demonstrating in-depth knowledge of CyberArk products, including the Enterprise Password Vault, Privileged Session Manager, and other related tools.

Overseeing the installation, configuration, and integration of CyberArk components to safeguard critical systems and data.

Engage with different stakeholders via workshops, etc. for all the design level discussions and prepare design documents.

Developing and enforcing security policies, access controls, and privileged access management procedures to mitigate risks.

Identifying vulnerabilities and potential threats, and implementing measures to protect against unauthorized access.

Maintaining detailed records, reports, and documentation of CyberArk configurations and activities.

Ensuring that CyberArk solutions are up-to-date and providing support for system upgrades and maintenance.

Interact with different teams to gather the required data for integration/ on-boarding of target systems /devices.

Resolving technical issues and providing expert guidance to address security challenges.

Skills / Technical Requirements

Expertise in providing PAM solutions using CyberArk.

Should have experience on CyberArk from 11.xx onwards

Design deploy & support high-performance, high-availability PAM environment with any number of target end points, creating workflows, custom connectors, policies.

Perform enhancement in CyberArk Core PAS

On-board target systems onto CyberArk Core PAS.

Support migration from Centrify to CyberArk Core PAS.

Integrate Legacy IDM instances with CyberArk to manage human accounts.

Support Redhat migration

Migrate CyberArk shared and pooled accounts.

Create named tiered accounts model and onboard name tiered accounts in CyberArk and assign them to correct IDM User Groups

Work on Migration model - Pooled Accounts to Named tiered account.

Perform Centrify Access Data Analysis to yield the current access data model and merge into the new Tiered Access Model.

Should be capable to deploy/install/configure CyberArk components Vault, CPM, PVWA, PSM, PSMP and AIM as per the client requirements.

Hands-on experience or knowledge on Configuring PTA, EPM.

Integrating various platforms with CyberArk such as Windows, UNIX, Databases and network devices, SSH Keys, SAP etc.

Creating and managing Safes, platforms and owners.

Should have knowledge on Password upload utility and PACLI.

Experience on integrating CyberArk solution with LDAP, SIEM SNMP and other identity management systems.

Strong scripting skills, often using languages like PowerShell, Python, or Shell scripting, to automate tasks and customize CyberArk solutions.

Knowledge of regulatory requirements and industry standards related to privileged access management, such as NIST, CIS, and GDPR.

Experience with security monitoring tools and integrating CyberArk with Security Information and Event Management (SIEM) systems.

Soft Skills

Excellent Verbal and written communication skills in English.

Ability to present solutions to clients remotely and in person if needed.

Good documentation skills that will enable creation of design documents for the technical solutions proposed.

Excellent problem-solving skills.

Good collaboration skills in working with virtual and distributed teams.

Certifications

Possession of relevant CyberArk certifications such as CyberArk Certified Delivery Engineer (CDE) or CyberArk Certified Trustee (CTP) can be a significant advantage.

Educational Qualifications

University degree in IT or/and IT Security