Description

[CyberArk PAM — Core] Install, configure, and administer CyberArk components including Vault, PVWA, CPM, PSM, PSMP, and Privilege Cloud; manage Safes, Policies, and onboarding of privileged accounts (Windows, Linux, databases, and service accounts).
[CyberArk PAM — Integration] Integrate CyberArk with Active Directory/LDAP, SSO, and network platforms (Cisco, Palo Alto, Fortinet); manage credential rotation, session recording, and development of CPM/PSM WebApp plugins.
[CyberArk PAM — Support] Handle L2 technical support tickets from clients related to infrastructure issues, third-party integrations, and CyberArk platform performance; coordinate with vendors and R&D teams to resolve complex issues.
[SIEM — Onboarding] Support onboarding of CyberArk logs (Vault audit logs, PSM session logs) into SIEM platforms such as Google SecOps (Chronicle) and/or Elastic Security; internal training will be provided for candidates who are not yet familiar with these platforms.
[Operations & Monitoring] Ensure the health and availability of the CyberArk platform operate optimally; use ITSM tools (ServiceNOW/JIRA) for ticket management, configuration changes, and incident documentation.
[Documentation & Knowledge Transfer] Prepare runbooks, SOPs, and technical documentation for CyberArk implementations; provide training and knowledge transfer to users and the client's internal IT teams.
[Cybersecurity Engineering] Perform other cybersecurity engineering activities as needed.

Requirements

CyberArk PAM (Vault, PVWA, CPM, PSM, PSMP, Privilege Cloud), Active Directory / LDAP, SSO, Windows & Linux Server Administration, Networking (TCP/IP, VLAN, Firewall — Cisco / Palo Alto / Fortinet), ITSM (ServiceNOW/JIRA).
Google SecOps (Chronicle), Elastic Security / Elastic Stack, basic scripting (Python/Bash/PowerShell), cloud platforms (GCP/AWS/Azure); candidates will receive on-the-job training in these areas.
Proactive in troubleshooting and problem-solving, strong technical communication skills with clients (including global clients), detail-oriented in documentation, able to work independently as well as in cross-functional teams, and committed to information confidentiality.
Nice to have certification: CyberArk Defender - PAM | Target: CyberArk Sentry - PAM | Google SecOps Training (on-the-job).
Hands-on experience as a CyberArk Engineer (L1/L2/L3), including installation, configuration, troubleshooting, and technical support for CyberArk PAM platforms in enterprise or multi-client environments.
Experience managing Active Directory (user/group management, GPO, integration with security applications) and handling technical tickets using ITSM tools.
Experience with enterprise network platforms (Cisco, Palo Alto, Fortinet) is a plus. Experience with SIEM platforms (any) or Google SecOps / Elastic is an advantage, but not mandatory — training will be provided.

Benefits

Cybersecurity Engineer