CyberArk Consultant

Years of Experience

•             6+ years of relevant experience in CyberArk Implementation - Design & Architecture.

General Description

•             Creating and implementing strategies for managing privileged access, designing solutions, and ensuring the secure storage and retrieval of sensitive credentials.

•             Demonstrating in-depth knowledge of CyberArk products, including the Enterprise Password Vault, Privileged Session Manager, and other related tools.

•             Overseeing the installation, configuration, and integration of CyberArk components to safeguard critical systems and data.

•             Engage with different stakeholders via workshops, etc. for all the design level discussions and prepare design documents.

•             Developing and enforcing security policies, access controls, and privileged access management procedures to mitigate risks.

•             Identifying vulnerabilities and potential threats, and implementing measures to protect against unauthorized access.

•             Maintaining detailed records, reports, and documentation of CyberArk configurations and activities.

•             Ensuring that CyberArk solutions are up-to-date and providing support for system upgrades and maintenance.

•             Interact with different teams to gather the required data for integration/ on-boarding of target systems /devices.

•             Resolving technical issues and providing expert guidance to address security challenges.

Skills / Technical Requirements

•             Expertise in providing PAM solutions using CyberArk.

•             Should have experience on CyberArk from 11.xx onwards

•             Design deploy & support high-performance, high-availability PAM environment with any number of target end points, creating workflows, custom connectors, policies.

•             Perform enhancement in CyberArk Core PAS

•             On-board target systems onto CyberArk Core PAS.

•             Support migration from Centrify to CyberArk Core PAS.

•             Integrate Legacy IDM instances with CyberArk to manage human accounts.

•             Support Redhat migration

•             Migrate CyberArk shared and pooled accounts.

•             Create named tiered accounts model and onboard name tiered accounts in CyberArk and assign them to correct IDM User Groups

•             Work on Migration model - Pooled Accounts to Named tiered account.

•             Perform Centrify Access Data Analysis to yield the current access data model and merge into the new Tiered Access Model.

•             Should be capable to deploy/install/configure CyberArk components Vault, CPM, PVWA, PSM, PSMP and AIM as per the client requirements.

•             Hands-on experience or knowledge on Configuring PTA, EPM.

•             Integrating various platforms with CyberArk such as Windows, UNIX, Databases and network devices, SSH Keys, SAP etc.

•             Creating and managing Safes, platforms and owners.

•             Should have knowledge on Password upload utility and PACLI.

•             Experience on integrating CyberArk solution with LDAP, SIEM SNMP and other identity management systems.

•             Strong scripting skills, often using languages like PowerShell, Python, or Shell scripting, to automate tasks and customize CyberArk solutions.

•             Knowledge of regulatory requirements and industry standards related to privileged access management, such as NIST, CIS, and GDPR.

•             Experience with security monitoring tools and integrating CyberArk with Security Information and Event Management (SIEM) systems.

Soft Skills

•             Excellent Verbal and written communication skills in English.

•             Ability to present solutions to clients remotely and in person if needed.

•             Good documentation skills that will enable creation of design documents for the technical solutions proposed.

•             Excellent problem-solving skills.

•             Good collaboration skills in working with virtual and distributed teams.

Certifications

•             Possession of relevant CyberArk certifications such as CyberArk Certified Delivery Engineer (CDE) or CyberArk Certified Trustee (CTP) can be a significant advantage.

Educational Qualifications

•             University degree in IT or/and IT Security