L3 Cyberark

Role & responsibilities

Core Services L3 Identity Protection (CyberArk)

Infrastructure & Operations - Tech Hub India

CONTEXT

This ambition relies on 2 main pillars: to create the Beauty of the future and to transform the Company of the future. We are transforming IT to pivot to this Beauty Tech ambition accelerating and laying down the right Tech foundations & capabilities. Together we are building the IT of the Future.

To enable Beauty Tech, while operating in an extremely challenging environment, the IT organization needs to constantly adapt and be strongly connected with new market trends and structural shifts. With that in mind, our IT organization must demonstrate flexibility and resilience, agility, and proximity to the markets, while delivering globally at scale with efficiency and customer and employee centricity. He/she will report directly to the India Tech Hub Identity Protection Lead. He/she, is responsible for overall RUN team support expertise and L3 technical escalations.

Preferred candidate profile

The Level 3 Identity Protection Engineer will have a deep expertise in CyberArk. This role required advanced troubleshooting skills, solution design capabilities and the ability to lead and support enterprise operations. The ideal candidate will process working knowledge of Splunk for Identity Protection analysis. The role focuses on providing escalation support leading complex change implementation and ensuring Identity Protection service quality in a large scale, multi site.

KEY ACTIVITIES & TASKS

• Act as the final point of escalation for critical, high-impact incidents that L1 and L2 teams cannot resolve
• Manage Identity Protection architecture in complex enterprise environment
• Responsible for managing action and future requests, including automation initiative
• Serve as technical SME for all Identity Protection related initiatives
• Lead advance trouble shooting and root cause analysis for Identity Protection related incidents
• Integrated Identity Protection logging with Splunk for analytics, alerting and compliance reporting
• Provide technical leadership to Level 1 and Level 2 teams, including mentoring and knowledge transfer
• Collaborate with Identity Protection teams for seamless end to end solutions
• Drive improvements in access control, performance, and user experience across Identity deployments
• Participate in change management, risk assessment and stakeholder communication
• Maintain technical documentation, solution design and runbooks, in alignment with compliant standards
• Resources should take care of RCA, design action plans for daily operations and help in the resolution
• Manage and prioritize the future or upcoming request. They should be able to present their POV regarding the upcoming changes.

PROFILE REQUIREMENTS

Technical Competencies

• Mandatory Primary skill Cyberark, secondary skill PKI
• Expertise in minimum one within PAM CYBERARK, API REST, PKI MICROSFFT ADCS, POWERSHELL, CUSTOM CONNECTORS, Infrastructure as Code and Azure Devops
• Strong mindset and understanding of identity security framework
• Proven track record overseeing Identity Protection solutions : PKI Microsoft, CLM

(Certificate LifeCycle Management), MIP (Microsoft Information Protection), CrowdStrike ITDR, PAM CyberArk, Custom Connectors Infrastructure as code, API Rest

• Splunk, Service now
• Experience multi-site or international is highly desirable.
• Experience in complex environment
• Troubleshooting , root cause analysis
• L2 skills minimum one within : ACTIVE DIRECTORY, ENTRA-ID, Infrastructure as Code, AzureDevops
• Strong interpersonal and stakeholder management skills
• Analytical thinking and problem solving mindset
• Ability to work in a high pressure environment with 24x7 operations
• Strong documents and presentation skills
• Process driven approach with attention to compliance and governance

Certifications & Qualifications:

• Bachelors / Master’s degree in Computer Science, IT, or related field.
• Any of the following certification : MCSA/E, AZ-104, AZ-400, AZ-500, AZ-900, SC-300, SC100, TCO/TCA