CyberArk Specialist

CyberArk Specialist - Long Term Contract - Remote/Milton Keynes

This role will be remote working for the short term and part based in Milton Keynes in the future.

Role Responsibilities for the CyberArk Specialist -

• You will be responsible for supporting PAM projects that include architecture, assessment, design, and development of PAM solutions categorised as new business requirements, audit items or existing defects/enhancements
• As a Cyberark Specialist you will play a key role on prioritising programme deliverables against the PAM strategy, work with a group of specialists to enhance the PAM capability overall and to ensure defects, enhancements and audit items are implemented successfully and in a timely manner
• You will be implementing and testing enhanced technologies for Cyberark such as Ticketing Integration, Accounts Discovery, Automation of Components installation, Integration with other third-party tools like SIEM, IGA, Authentication tools, Server Migrations and automating repetitive operational tasks is key for this role
• Review and implement new platform policies and safe design for password rotation, check-in check-out, password visibility and ServiceNow integration as part of the project
• Work with various technology teams across the organisation to identify edge cases and standard use cases for consideration in defining the platform policies for CPM and PSM
• The candidate should also be aware of priority issues affecting the product and support the delivery of fixes to those to maintain a stable production environment ie CPM/PSM Plugin Maintenance, Vault/Components configuration, PVWA/Master Policies, Vault patching/upgrade, Backup and Restore processes etc
• Able to adapt existing process to meet developing requirements in a changing, complex environment and escalate exceptions where necessary
• Assist in maintaining information security best practices and procedures
• Respond to incidents and work with support/project teams to resolve the problem, enabling the to return systems to normal operating conditions
• Deliver project milestones and tasks assigned by manager on schedule, communicating progress regularly with project manager
• Stay on top of the latest technology trends and make recommendations to correct deficiencies and deliver improvements
• Communicate effectively with management, stakeholders, and co-workers

Knowledge and skills required for the CyberArk Specialist

Essential:

• Cyberark Sentry qualification and or CDE
• BSc/BA/BE/B Tech in Computer Science, Engineering, Information Systems and/or equivalent formal training or demonstratable experience
• Experience in Cyber security and having min 4+ years of experience in design/development in CyberArk
• Experience deploying AIM/AAM, CPM, PSM Plug-in developments
• 6+ years of experience as a technical SME and/or senior engineer specifically for Windows and the.NIX operating system
• Experience creating platforms for the management of credentials on Unix, Windows, Database systems, web application, HP-ILO, DRAC, VMware, ESXI and Tier 0 appliances/devices
• Experience with Usage and entitlements, Managing Applications Credentials, Auto upload and User Access Policy Management
• Experience in performing Privileged Access Reviews, Compliance Reporting, Access Control Processes, and other associated tasks with Privileged User Management
• Experience of using and implementing multi factor authentication solutions (RSA, RADIUS, SAML)
• Experience with IGA processes and performing Privileged Access Reviews, Compliance Reporting, Access Control Processes, and other associated tasks with Privileged User Management
• Expert understanding of privileged access management principles such as (groups/shadow/Sudo) in UNIX and delegation rights and permission, inheritances in Windows and databases
• Experience with supporting Cyberark components such as PVWA, PSM, PSMP, PTA, CPM and Vaults
• Experience in various databases technologies and its integration user cases into PAM such as MS SQL, MySQL, Oracle, Postgres, Mongo, Redis etc and their respective end user clients
• Troubleshooting plugin issues and connectivity on the networks
• Understanding of network protocols like TCP/IP, UDP, DNS, DHCP, SSH, POP, SMTP, FTP, SFTP, HTTP and HTTPs
• Must be able to script in any one or two of the following, PowerShell, Bash, Python, Ansible (playbooks)
• Good understanding of AD, LDAP, PKI, and Open SSL certificate authority
• Detailed knowledge of authentication protocols and technologies such as HTTP/s, AD/LDAP, IPA, SSL, Kerberos, SSSD, NFS, SSH Key Management
• Excellent Technical analysis/problem solving, interpersonal, verbal and troubleshooting skills