Track Lead - Identity Management

Job Summary

• Deep CyberArk expertise who can design custom processes and lead a migration from an unstructured deployment to an industry’s best-practice model. • Strong migration and architecture experience • Creating and implementing strategies for managing privileged access, designing solutions, and ensuring the secure storage and retrieval of sensitive credentials. • Demonstrating in-depth knowledge of CyberArk products, including the Enterprise Password Vault, Privileged Session Manager, and other related tools. • Overseeing the installation, configuration, and integration of CyberArk components to safeguard critical systems and data. • Engage with different stakeholders via workshops, etc. for all the design level discussions and prepare design documents. • Developing and enforcing security policies, access controls, and privileged access management procedures to mitigate risks. • Identifying vulnerabilities and potential threats, and implementing measures to protect against unauthorized access. • Maintaining detailed records, reports, and documentation of CyberArk configurations and activities. • Ensuring that CyberArk solutions are up-to-date and providing support for system upgrades and maintenance. • Interact with different teams to gather the required data for integration/ on-boarding of target systems /devices. • Resolving technical issues and providing expert guidance to address security challenges.

Key Responsibilities

Expertise in providing PAM solutions using CyberArk. • Should have experience on CyberArk from 11.xx onwards • Design deploy & support high-performance, high-availability PAM environment with any number of target end points, creating workflows, custom connectors, policies. • Should be capable to deploy/install/configure CyberArk components Vault, CPM, PVWA, PSM, PSMP and Secrets Manager (CP/ CCP) as per the client requirements. • Hands-on experience or knowledge on Configuring PTA, EPM. • Integrating various platforms with CyberArk such as Windows, UNIX, Databases and network devices, SSH Keys, SAP etc. • Creating and managing Safes, platforms and owners. • Should have knowledge on Password upload utility and PACLI. • Experience on integrating CyberArk solution with LDAP, SIEM SNMP and other identity management systems. • Strong scripting skills, often using languages like PowerShell, Python, or Shell scripting, to automate tasks and customize CyberArk solutions. • Knowledge of regulatory requirements and industry standards related to privileged access management, such as NIST, CIS, and GDPR. • Experience with security monitoring tools and integrating CyberArk with Security Information and Event Management (SIEM) systems

Skill Requirements

Expertise in providing PAM solutions using CyberArk. • Should have experience on CyberArk from 11.xx onwards • Design deploy & support high-performance, high-availability PAM environment with any number of target end points, creating workflows, custom connectors, policies. • Should be capable to deploy/install/configure CyberArk components Vault, CPM, PVWA, PSM, PSMP and Secrets Manager (CP/ CCP) as per the client requirements. • Hands-on experience or knowledge on Configuring PTA, EPM. • Integrating various platforms with CyberArk such as Windows, UNIX, Databases and network devices, SSH Keys, SAP etc. • Creating and managing Safes, platforms and owners. • Should have knowledge on Password upload utility and PACLI. • Experience on integrating CyberArk solution with LDAP, SIEM SNMP and other identity management systems. • Strong scripting skills, often using languages like PowerShell, Python, or Shell scripting, to automate tasks and customize CyberArk solutions. • Knowledge of regulatory requirements and industry standards related to privileged access management, such as NIST, CIS, and GDPR. • Experience with security monitoring tools and integrating CyberArk with Security Information and Event Management (SIEM) systems

Other Requirements

Possession of relevant CyberArk certifications such as CyberArk Certified Delivery Engineer (CDE) or CyberArk Certified Trustee (CTP) can be a significant advantage.