PAM Identity and Access Management Engineer

About the Role

Senior Engineer, PAM Identity and Access Management

• Provide support for CyberArk AIM component and applications onboarded to use the AIM integration for privileged account management.
• Experience in performing Privileged Account Management with fair understanding of the underlying business processes.
• Responsible for determining the target Privileged Session Management (PSM) audience.
• Configuration of multiple Privilege accounts across the organization and Administration of CyberArk, Integration of window accounts, Unix accounts, Database, Network and Security Device and Migrate user accounts into Password Vault using Bulk upload utility.
• Monitor CyberArk reports and respond to failed password verification alerts and work with system account owners to resolve failure alerts.
• Experienced in day-to-day operational support in adding and deleting accounts, applying policies, assigning safes, synchronizing failed accounts, Password rotations.
• Determine what infrastructure and systems PSM will target (servers, virtual servers, database)
• Maintain development, testing, and production systems. Coordinate maintenance with support teams.
• Experience with Vulnerability and Patch Management.
• Experience in Windows/Linux OS troubleshooting.
• Perform application and Job designs with the existing and current requirements.
• Providing support to Server owners on the security Servers.
• Coordinate with CyberArk support teams for escalation and resolution issues.
• Monitoring logs, analyzing logs and Troubleshooting issues with the server and the integrating various platforms with CyberArk, such as different LDAP providers, Windows servers, UNIX servers, Databases and networking Devices, middleware, and databases
• Hands-on the automation & DevOps infrastructure of CyberArk multi-component products in complex multi-platform environment

About You

You're a fit for the role of Senior Engineer, PAM Identity and Access Management if your background includes:

• 6+ years experience with CyberArk implementation, administration and maintenance.
• Experience with the scripting technologies and tools that drive automation and enable product teams and end users to move towards self-service
• Experience in the using/automating CyberArk Web Service APIs SDK
• Experience operating within a 24x7 operational service.
• Installation and configuration of the EPV components (Central Policy Manager, Password Vault Web Access, High Availability Vault Cluster, Secure Zone Access, SAN storage, SSL certificates and Load Balancing.)
• Current understanding of Industry trends and emerging threats
• Working knowledge of any of the IAM products from any of the following vendors: Oracle, Sail point, etc.
• Background with components such as vaults, CSMs, PSM, accounts, policies, safes, usages, PACLI, and providers.
• Administration and maintenance of company's E-Directory Creation of policies and reports in PVWA.
• Administration experience of CyberArk vault with Safe creation, integration with LDAP and other authentication methods.
• Service registration, workflows, user management, management dashboard
• Role Base - Access Control (RBAC), Attribute Base Access Control (ABAC), resource and business layers Provisioning, credentialing, federation, and auditing.
• Involved in application-to-application credential management.