PAM CyberArk Security Engineer - Contract

Job Title : PAM CyberArk Security Engineer - Contract

Work Location : Bengaluru / Gurgaon

Work Culture : Hybrid

About your role:

As a PAM technical support engineer you will play a key role in deliverables against the PAM strategy, working with a group of specialists to enhance the PAM capability overall and to ensure defects, enhancements and audit items are implemented successfully and in a timely manner.

The engineer will be responsible for supporting PAM projects that include architecture, assessment, design and development of PAM solutions categorized as strategic items as well as supporting the live PAM solution and infrastructure (DR, Incidents & enhancement requests).

The engineer should also be aware of priority issues affecting the product and support the delivery of fixes to those to maintain a stable production environment. Examples of this includes but not limited to CyberArk CPM/PSM Plug in Maintenance, Vault/Components configuration, PVWA / Master Policies, Vault patching / upgrade, Backup and Restore processes.

Key Responsibilities:

Understand architecture of security component services for privilege access management including infrastructure and application design

Identify requirements and execute technology POC / pilots

Provide BAU Support, Incident management, SRM management

Support in providing audit evidence for PAM products

Platform/Application on boarding into PAM products

Carry out infrastructure and application build/implementations

Carry out application integration and automation

Ad-hoc development of plug ins and solutions

Create and maintain release management and solution documentation

Knowledge transfer and training as appropriate

Engage with Business and Tech delivery teams for their application integration

Design solutions and approach for streamlining app/Infra/database on boarding

Input to PAM technology security roadmaps and strategy

Input to wider technology stream strategies, design and implementations

Ownership of PAM led projects, and participation in non-security led project activities

Prioritise problem records (requiring engineering efforts) & their resolution

Contributing to PAM product roadmaps, future strategy

Provide guidance, mentoring of junior members and make sure required product patching/upgrades/DR are appropriately documented, tested and conducted regularly

Work with other teams, Project/Support Managers, counterparts in Support / Platform teams and various stakeholders across Technology and Business, to ensure product support/engineering roles and responsibilities are fully understood.

to be a strategic thinker, understand complex technical and architectural issues from security perspective and the implications associated with the chosen technical strategy.

About you

The successful candidate will be experienced in standard engineering practices, from product and infrastructure design, through to implementation, documentation and testing.

Experience in implementing and testing enhanced technologies for CyberArk such as Ticketing Integration, Accounts Discovery, Automation of Components installation, Integration with other third-party tools like Syslog, IGA, Authentication tools etc Server Migrations, automating repetitive operational tasks is key for this role.

Having knowledge of other industry PAM tools will required for this role, the PAM product team will manage tools such as Cyber Ark, Beyond trust EPM and Secrets management. Having exposure to cloud infrastructure will also be advantageous.

The role will require a strong level of technical skills and customer facing skills to ensure the engagement with the business and technical teams is maintained throughout engagement.

Knowledge and Experience:

Deep technical skills in IAM & PAM technologies & integration of associated tooling and technology platforms

Expert experience with tools such as Cyber Ark, Sail Point, EPM and Secrets management

Minimum of Cyber Ark Defender, (Sentry preferred) certification and equivalent for other PAM tools

Scripting skills and ability to understand scripts written in Power Shell, Python and Auto IT

Good data analytical skills

Experience on cloud solutions (internal, public and hybrid) with major cloud platforms and service providers AWS, Azure, GCP, etc.

Experience in supporting a live production environments.

Experience with PAM Operational tasks - Creating Safes, Defining Access Control, Policies/Platforms, User provisioning and entitlements, Managing Applications Credentials, Auto upload and User Access Policy Management

Experience in performing Privileged Access Reviews, Compliance Reporting, Access Control Processes and other associated tasks with Privileged User Management.

Able to understand and follow high level and low-level infrastructure architectures and designs & work with PAM architect to deliver requirements

Understanding of high availability application architectures, including network and application load balancing and failover.

Significant experience with integration, migration and handling communication issues among applications, databases and technology platforms. Good understanding of mechanisms for logging in to such platforms (SSH, RDP.)

Working knowledge and experience with agile way of working, DevSecOps operation practice and ITIL service management model

Ability to work as part of a global team, to take the initiative, balance workload and prioritise accordingly

Proven experience working in a Cyber Security environment understanding risk and priorities

Excellent verbal and written communication skills and ability to interact professionally with multiple stakeholders and technical teams (Technical Engineers and Developers)

Experience and understanding of SDLC, ITIL, IT service management processes and release management

Excellent verbal and written communication skills and ability to interact professionally with multiple stakeholders and technical teams (Technical Engineers and Developers)

Experience and understanding of SDLC, ITIL, IT service management processes and release management