Key responsibilities will be as follows:
- Manage and operate CyberArk PAM solution components including Password Vault Server, Central Policy Manager (CPM), and Privileged Session Manager (PSM)
- Implement and maintain password vaulting strategies for diverse secret types including AD service accounts, API keys, SSH certificates, database credentials, and application passwords
- Configure and optimize automated password rotation policies, managing complex dependency executions
- Work with application teams to design and implement secure credential retrieval workflows using CyberArk's credential providers including Central Credential Provider (CCP)
- Monitor and troubleshoot PAM operations, ensuring 99.5%+ system availability and rapid incident resolution
- Collaborate with application teams, infrastructure engineers, and security architects to integrate PAM solutions into existing and new systems
- Document operational procedures
- Support compliance initiatives by maintaining audit trails and access logs for privileged account usage
Education Requirements:
- Bachelor's degree in Computer Science, Information Security, Information Technology, or related field
Experience Requirements:
- Overall 2-5 years of experience in cybersecurity, systems administration, or PAM technologies
- Minimum 2+ years of hands-on experience with CyberArk PAM solution in production environments
Expertise/Required Skills:
- CyberArk PAM architecture and core components (Vault, CPM, PSM, PVWA)
- Password vaulting methodologies and secret lifecycle management
- Automated password rotation configuration and dependency management
- CyberArk credential provider implementations (CCP API, CP, REST API integrations)
- Standard secret types management including – AD/LDAP service accounts, API keys and tokens for cloud and application services, SSH certificates and private keys, Database credentials, application-specific credentials etc.
- Technical proficiency in:
- CyberArk policy configuration and platform management
- Dependency mapping and rotation impact analysis
- PowerShell, Python, or similar scripting languages for automation
- LDAP/Active Directory integration and authentication protocols
- Operational skills:
- Incident response and troubleshooting for PAM-related issues
- Change management processes for privileged access modifications
- Strong analytical and problem-solving capabilities
-
Effective communication skills for technical documentation and cross-team collaboration
- Preferred/Nice-to-Have Skills:
- Experience with CyberArk Secrets Manager for DevOps and cloud-native applications
- Familiarity with CyberArk Endpoint Privilege Manager (EPM) solution
- Basic experience in CyberArk infrastructure component installation and hardening procedures
- Experience with cloud platforms (AWS, Azure, GCP) and their native secret management services
- Windows Server and Linux system administration
- Network security concepts and access control methodologies
- Performance monitoring and capacity planning for PAM infrastructure
- LDAP/Active Directory integration and authentication protocols