Job Description (Posting). CyberArk L3 JD: Performed installation and configuration of CyberArk Components CPM, PVWA,PTA, PSM and PSMP Hands-on experience in integrating CyberArk with SMTP and Directory servers. Worked on accounts discovery process for automatic on-boarding of privileged accounts. Configuration of Disaster Recovery Vault with Replication and performed automatic fail-over and manual fallback process as part of implementation. Experience in integrating CyberArk with SIEM Qradar servers. Consolidate the solution requirements, analyses and propose the infra required for implementation. Integrating various platforms with CyberArk, such as different LDAP providers, Windows servers, UNIX servers, middle-ware devices, and databases. Experience in integrating CyberArk Vault for MFA Authentication via RADIUS and Azure MFA. Worked on CyberArk DNA (Discovery and Audit) Scanner which automatically discovers and analyses any privileged and non-privileged account within servers and then generates a report and visual organizational map that evaluates the privileged account security status Good experience in defining policies, password management based on CyberArk Master Policy Privileged Session Manager and Privileged Session Manager SSH proxy (PSMP)Troubleshooting and fixing CPM failures. PSM Connector development using AUTOIT and testing across various platforms. Integrating various platforms with CyberArk, such as different LDAP providers, Windows servers, UNIX servers, I series Servers etc. Static account remediation via AIM (Agent and Agentless) Analysis/ On boarding Privileged accounts into CyberArk to be fully ITEC Compliant. Setting up CPM usages for Service accounts via Automation for App Pools / Win services / Sch tasks. Secure Environment and Permission based on Teams (Configuring Safes in CyberArk) Reconciliation, Password Synchronization, Service definition for Target System, Workflows Session recording and live monitoring Actively participating in continuous process improvement initiatives: Helping with the plugin development for Automation in password resets via CyberArk, Privileged accounts review and making improvements on how accounts are managed. CyberArk Sentry or CDE certification is an added advantage Good verbal and written communication skills Customer Facing Exposure is must. (1.) To clearly understand the client's cybersecurity environment and respective product. (2.) To monitor, configure, and troubleshoot cybersecurity issues and related monitoring tools (3.) To analyse and validate cybersecurity incidents in-detail and help the L3 team with RCAordata or logs collection (4.) To enable knowledge transferortrainings through creationor maintenance of configuration documents, test plans, operational manuals and provide operational training to L1 team. (5.) To analyse and fine-tune cybersecurity policies, participate in cybersecurity review calls pertaining to change requests and recommendations on cybersecurity policy changes. (6.) To implement changes, monitor security device performance and implements performance tuning when necessary. (7.) To prepare analyses and reports to highlight the project progressorchallenges and ensure quality and accuracy to the client Qualification B Tech Skill (Primary) Information Security-Identity and Access Management-Privileged Account Management Operations
