Role & responsibilities

• Provide L2 support for CyberArk PAM platform, including Vault, CPM, PVWA, and PSM components.
• Handle incidents, service requests, and escalations from L1 teams.
• Onboard privileged accounts and configure password management policies.
• Maintain safe structures, platforms, and connection components.
• Assist in migrating legacy privileged accounts to CyberArk.
• Support rollout of PAM policies across applications, servers, and databases.
• Ensure PAM processes adhere to internal security standards and regulatory requirements.
• Provide evidence for audits and certification campaigns.
• Develop scripts for account onboarding and health checks using PowerShell or REST APIs.
• Work with L3 engineers, architects, and application teams to resolve complex issues.
• Document procedures and provide knowledge transfer to L1 teams.

Preferred candidate profile

• Hands-on experience with CyberArk components (Vault, PVWA, CPM, PSM).
• Knowledge of Windows/Linux administration and Active Directory.
• Familiarity with ITIL processes and ticketing tools (ServiceNow/Jira).
• Basic scripting skills (PowerShell, Python) for automation.
• Understanding of PAM concepts: credential rotation, session management, least privilege.

Tools & Technologies

• CyberArk PAM platform (Vault, PVWA, CPM, PSM)
• Windows/Linux OS
• Active Directory
• ITSM Tools: ServiceNow, Jira
• Automation: PowerShell, Python