Security Engineer, CyberArk

Job Description

About the Job: A managed service CyberArk engineer plays a key role in the daily operations of the system, ensuring it s running efficiently and that requests via ticketing systems are completed with SLAs. The candidate requires hands-on experience with CyberArk Privileged Access Solution and managing its business as usual type tasks The role frequently involves investigating and resolving technical problems, so demonstrated troubleshooting skills are required, along with effective organization skills, the ability to multi-task, and efficient time-management skills. Responsibilities: Responsible for implementing part or all the technical solution to the client, in accordance with an agreed technical design. Occasionally responsible for providing a detailed technical design for enterprise solutions. Understands a broad spectrum of Privileged Access Management technology to provide part or all detailed technical design which meets customer requirements. Develop maintainable, scalable, and secure source code that meets business requirements and team standards. Able to communicate and present complex issues with assurance and confidence. Demonstrates the use of consulting skills including questioning, listening, ideas development, permission, and rapport, and influencing. Able to discuss (within own area of expertise) requirements with a customer, and to challenge and clarify when appropriate. From the requirements, able to develop a high-level design or plan, and then estimate the amount of effort required to deliver. Able to advise the engagement owner about the risks associated with this work package. Requirements: Minimum 2 to 5 years administration experience in working on large, complex CyberArk environments Experience on working with PCloud environment & Standalone/High-Availability - cluster environment for CyberArk Core PAS modules. Experience with onboarding different platform accounts such as Windows, Unix, Databases (Oracle, Sybase, MSSQL, MySQL), Web applications (AWS/Azure), Network/Security Devices, etc. Knowledge on integrating CyberArk solution with HSM, LDAP, SIEM, SNMP, ticketing system and multi- factor authentication etc. Knowledge on custom PSM Connectors/CPM Plugins (with AutoIT/Shell Scripting) and good knowledge on auto-detection configuration and usage of Discovery Scanning tools. Experience on AAM (CP and CCP). Knowledge upgrading CyberArk version and managing patch/upgrade/security fix strategy. Knowledge in DR Drill activities, Backup, Reporting etc. Knowledge in Vault OS/Infra patching and connector management. Perform health check monitoring on all the CyberArk servers to ensure consistent availability of system to end users. Experience/Knowledge troubleshooting CyberArk Core PAS (Vault, PVWA, CPM, PSM, PSMP), AAM, HTML5 gateway & Remote Access (Alero). In-depth Knowledge of ITIL processes like Incident Management, Problem Management, Configuration Management and Change Management processes. Advanced trouble shooting skills and identifying the severity of the issue, ability to resolve issues quickly to account/customer satisfaction and conduct RCA. Documentation of technical configuration Provide operational support on a 24x7/8X5 rotation basis. Provides production support and participates in on-call rotation. CyberArk Defender/Sentry is mandatory. Add-on: CDE-PAM/CDE-CPC. Add-on (Key Values) Knowledge/Experience on CyberArk EPM & WPM. Knowledge in Remote Access (Alero), HTML5GW, Identity, Conjur etc. Knowledge in integrating Conjur with various DevOps tools like Jenkins, Ansible, Kubernetes, OpenShift, Gitlab, and Terraform.