Job Summary

L2 CyberArk PAM & Identity Management Engineer responsible for CyberArk administration, privileged account lifecycle management, access control, IAM operations, troubleshooting, security compliance, and L2 operational support.

Key Responsibilities

CyberArk / PAM Administer and provide L2 operational support for CyberArk PAM components and privileged account services. Perform onboarding, modification, and offboarding of privileged accounts and service accounts. Configure and maintain CyberArk safes, platforms, policies, account permissions, and access controls. Support password management, rotation, reconciliation, and privileged session management. Troubleshoot issues related to privileged account access, password synchronization, authentication, and session connectivity. Monitor CyberArk services and investigate operational alerts, failures, and availability issues. Support CyberArk components such as Digital Vault, PVWA, CPM, PSM, and PTA, depending on the deployed architecture. Perform health checks and support upgrades, patches, certificates, integrations, and disaster-recovery activities. Maintain PAM operational documentation, SOPs, configuration records, and audit evidence. Identity & Access Management Support user identity lifecycle activities including provisioning, modification, disabling, and de-provisioning. Manage access requests, security groups, role-based access, and entitlement-related activities. Support authentication and authorization issues involving enterprise identity platforms such as Microsoft Active Directory and Microsoft Entra ID. Assist with IAM integrations between enterprise applications, directories, and PAM solutions. Support periodic access reviews, recertification, privileged-access reviews, and remediation activities. Investigate access-related incidents and coordinate with security, infrastructure, application, and service desk teams.

Skill Requirements

Hands-on experience with CyberArk Privileged Access Management (PAM). Working knowledge of PVWA, CPM, PSM, CyberArk Vault/Safes, account onboarding, and password management. Good understanding of Active Directory, LDAP, authentication, authorization, RBAC, and identity lifecycle management. Knowledge of Windows and Linux privileged/service accounts. Understanding of security concepts including least privilege, privileged access, MFA, credential management, and segregation of duties. Familiarity with ITSM processes covering Incident, Service Request, Change, and Problem Management. Ability to analyze logs and troubleshoot PAM/IAM issues independently at L2 level. Exposure to Microsoft Entra ID, SSO, MFA, identity governance, or other IAM platforms would be advantageous.

Other Requirements

Strong troubleshooting and analytical skills. Good understanding of enterprise security and access-control principles. Ability to handle incidents and operational escalations within agreed SLAs. Strong documentation and communication skills. Ability to coordinate effectively with infrastructure, application, cybersecurity, audit, and service-management teams.