Cyberark Engineer

Role Overview

The RSA Governance & Lifecycle and CyberArk (formerly RSA Aveksa) Consultant/Implementer/Administrator is responsible for designing, configuring, administering, and supporting RSA G&L solutions and CyberArk to meet an organization’s Identity Governance requirements. This role involves end-to-end implementation, business requirement analysis, connector development, access certifications, rules & policies creation, integration with applications, and ongoing platform maintenance.

Key Responsibilities

1. Implementation & Configuration

• Install, configure, and upgrade RSA G&L and CyberArk modules (Admin, AVM, ACR, ACM, IGL).
• Implement end-to-end RSA G&L solutions including collector configurations, fulfillment workflows, and application onboarding.
• Develop and configure Data Collectors, Account Collectors, Application Collectors, and Change Request Forms.
• Configure access request workflows (SOD, approval workflows, separation of duties, role-based access).
• Implement Joiner-Mover-Leaver (JML) processes within RSA G&L.
• Set up Access Certification campaigns and entitlement reviews.

2. Administration & Support

• Perform daily administration tasks: server health checks, job monitoring, workflow monitoring, and log analysis.
• Troubleshoot RSA G&L and CyberArk issues related to workflows, data loads, connectors, or UI functionality.
• Manage entitlements, roles, user access, and policy configurations.
• Support periodic audits, compliance requests, and certification campaigns.
• Maintain platform performance, patching, environment upgrades, and backup/restore activities.

3. Integration & Development

• Onboard applications using collectors, connectors, JDBC integrations, REST APIs, Web Services, etc.
• Develop custom SQL queries, stored procedures, and views for data transformations.
• Configure fulfillment integrations using custom scripts, SOAP/REST, LDAP, AD, and other target systems.
• Integrate RSA G&L with ITSM tools (ServiceNow, Remedy), HR systems, and directory services.

4. Governance, Risk & Compliance (GRC)

• Develop SoD (Segregation of Duties) rules, access policies, risk scoring, and control checks.
• Define governance models and role management strategies.
• Support internal/external audits (SOX, ISO, GDPR).
• Ensure compliance standards and produce audit-ready reports.

5. Documentation & Stakeholder Management

• Document configurations, workflows, architecture, and operational procedures.
• Conduct requirement workshops with business and technical teams.
• Provide user training, UAT support, and knowledge transfer.
• Work with cross-functional teams for IAM integration and governance processes.

Required Skills & Experience

Technical Skills

• Hands-on experience with RSA G&L and CyberArk end-to-end implementation and configuration.
• Proficiency in SQL (Oracle preferred).
• Experience developing and troubleshooting collectors, connectors, and fulfilment Workflows.
• Understanding of IAM concepts: SOD, Role Mining, RBAC/ABAC, Birthright provisioning.
• Familiarity with REST/SOAP APIs, LDAP, Active Directory, and ticketing systems.
• Strong understanding of Identity Governance frameworks & compliance standards.

Soft Skills

• Strong analytical and troubleshooting skills.
• Excellent communication and client-handling abilities.
• Ability to work independently with minimal supervision.
• Documentation, planning, and prioritization skills.

Preferred Qualifications

• 3–15 years of experience in RSA G&L (Aveksa) and CyberArk PIM/PAM.
• Certification in RSA IGL (if available) is a plus.
• Certification of CyberArk CDE.
• Experience in broader IAM technologies (SailPoint, Azure AD) is beneficial.
• Knowledge of Linux and basic scripting (Shell/Python)