CyberArk PAM Security Expert

Company Description

LTIMindtree is a global technology consulting and digital solutions company that enables enterprises across industries to reimagine business models, accelerate innovation, and maximize growth by harnessing digital technologies. As a digital transformation partner to more than 700+ clients, LTIMindtree brings extensive domain and technology expertise to help drive superior competitive differentiation, customer experiences, and business outcomes in a converging world. Powered by nearly 82,000 talented and entrepreneurial professionals across 30+ countries, LTIMindtree a Larsen & Toubro Group company combines the industry-acclaimed strengths of erstwhile Larsen and Toubro Infotech and Mindtree in solving the most complex business challenges and delivering transformation at scale. For more info, please visit www.ltimindtree.com.

Position Overview: The role requires expert knowledge in designing, deploying, scripting, integrating, and managing the CyberArk PAM suite, including all major components and custom solutions.

Design and Architecture Responsibilities: The expert will design enterprise PAM architectures covering high-availability, disaster recovery, network segmentation, component placement, privilege escalation strategies, and integrations with SIEM, ITSM, IAM, and orchestration platforms.

Deployment and Implementation: Responsibilities include deploying core CyberArk components such as Vault, PVWA, CPM, PSM, PTA, EPM, Conjur, DNA, OPM, Alero, and Cloud Entitlements Manager, with configurations tailored for security and performance.

Scripting and Automation: The expert must develop automation scripts in PowerShell and Python, create custom CPM plugins, automate account discovery and onboarding, build reporting tools, and implement infrastructure-as-code solutions for CyberArk deployments.

Integration and Custom Connectors: Tasks include integrating CyberArk with SIEM, ITSM, LDAP/AD, multi-factor authentication systems, cloud platforms, databases, DevOps tools, and developing custom connectors for proprietary applications.

Operations and Support: The expert monitors platform health, performs maintenance, troubleshoots issues, manages privileged account lifecycles, provides Tier 3 support, conducts security assessments, plans capacity, executes patch management, and maintains documentation.

Security and Compliance: Implementation of privileged access policies aligned with regulatory standards, user behavior analytics, security hardening, compliance reporting, and enforcement of least privilege and separation of duties are key responsibilities.

Required Qualifications and Skills: A bachelor's degree or equivalent experience, over 7 years in information security with at least 5 years hands-on CyberArk experience, expert mastery of CyberArk components, scripting, API development, operating system, database, networking, cloud, DevOps, and security frameworks knowledge.

Certifications and Preferred Qualifications: Required certifications include CyberArk CDE and CCD-PAM, with preferred certifications such as CyberArk Trustee, CISSP, CISM, and cloud security specialties. Experience with large-scale deployments, custom development, penetration testing, containerization, regulated industries, and community involvement is advantageous.