Cyberark SME Expert

We are seeking an experienced CyberArk SME to join our Cyber Security and Identity Access Management team. The ideal candidate will possess deep expertise in CyberArk PAM solutions, including CyberArk CCP (Central Credential Provider), CP (Credential Provider), and Conjur, along with strong scripting and automation skills. The candidate will play a critical role in designing, implementing, automating, and maintaining privileged access management solutions across enterprise environments while enabling DevSecOps integration through Terraform and CI/CD pipelines.

The core responsibilities for the job include the following:

CyberArk Administration and Engineering:

• Design, deploy, configure, and manage CyberArk PAM solutions across enterprise environments.
• Administer and support CyberArk components, including Enterprise Password Vault (EPV), Privileged Session Manager (PSM), Password Vault Web Access (PVWA), Central Policy Manager (CPM), Credential Provider (CP), Central Credential Provider (CCP), and Conjur Secrets Manager.
• Configure and maintain Safes, Platforms, Applications, and Account Onboarding processes.
• Perform onboarding and offboarding of privileged accounts across Windows, Linux, Unix, databases, network devices, and cloud platforms.
• Troubleshoot and resolve CyberArk infrastructure issues and security incidents.
• Conduct upgrades, patching, and health checks of CyberArk components.

Conjur and Secrets Management:

• Implement and manage CyberArk Conjur for cloud-native and containerized environments.
• Integrate Conjur with Kubernetes, OpenShift, Docker, and cloud platforms.
• Develop secure secrets management solutions for DevOps and application teams.
• Support secret rotation, credential lifecycle management, and policy administration.

Automation and Scripting:

• Develop automation scripts using PowerShell and/or Python.
• Automate privileged account onboarding, password rotation, compliance reporting, and operational activities.
• Build reusable automation frameworks to improve operational efficiency.
• Create custom integrations between CyberArk and enterprise applications.

Infrastructure as Code (IaC):

• Design and implement Infrastructure as Code (IaC) solutions using Terraform.
• Develop Terraform modules for provisioning CyberArk infrastructure and cloud resources.
• Automate deployment and configuration management processes.
• Maintain version-controlled infrastructure templates and automation repositories.

CI/CD and DevSecOps Integration:

• Integrate CyberArk Conjur and credential management solutions into Git-based CI/CD pipelines.
• Implement secrets injection and secure authentication mechanisms within CI/CD workflows.
• Design security controls and automate policy enforcement across development pipelines.
• Collaborate with DevOps teams to enable secure application deployments.

Security and Compliance:

• Ensure privileged access controls comply with organizational security policies and industry standards.
• Participate in security audits, compliance reviews, and risk assessments.
• Generate audit reports and provide recommendations for PAM best practices.
• Support regulatory compliance requirements such as ISO 27001, SOC2, PCI-DSS, and NIST frameworks.

Stakeholder Management:

• Work closely with security, infrastructure, cloud, DevOps, and application teams.
• Provide technical guidance and mentorship to junior engineers.
• Prepare technical documentation, architecture diagrams, SOPs, and knowledge base articles.
• Participate in incident management, root cause analysis, and problem management activities.

Requirements:

• 7+ years of overall IT experience with strong cybersecurity/PAM expertise.
• 4+ years of hands-on experience in CyberArk PAM administration and engineering.
• Strong experience with CyberArk EPV, PVWA, CPM, PSM, Credential Provider (CP), Central Credential Provider (CCP), and Conjur.
• Strong scripting expertise in PowerShell and Python.
• Hands-on experience with Terraform.
• Experience working with Git-based CI/CD platforms such as GitLab CI/CD, GitHub Actions, and Azure DevOps.
• Strong knowledge of Windows and Linux administration.
• Experience with REST APIs and automation integrations.
• Understanding of IAM, PAM, secrets management, and Zero Trust principles.

Preferred Skills:

• Experience with Kubernetes, Docker, and OpenShift.
• Exposure to Azure, AWS, or GCP cloud environments.
• Experience with DevSecOps practices.
• Familiarity with SIEM and security monitoring tools.
• Knowledge of Ansible and configuration management tools.
• Experience with Agile and ITIL environments.

Certifications (Preferred):

• CyberArk Defender Certification.
• CyberArk Sentry Certification.
• CyberArk Guardian Certification.
• Microsoft Azure Security Engineer Associate.
• Certified Information Systems Security Professional (CISSP).
• HashiCorp Terraform Associate.