CYBERARK ENGINEER-L2

CyberArk Engineer – L2

Location: Mumbai

About Company:

The company is a cybersecurity-focused organization helping enterprises strengthen cyber governance, protect digitally managed assets, reduce attack surfaces, and proactively identify security threats. The company provides cybersecurity solutions focused on privileged access, security monitoring, risk intelligence, and protection of critical information systems.

About the Role:

We are looking for a CyberArk Engineer – L2 to manage the implementation, daily operations, support, monitoring, and maintenance of the CyberArk Privileged Access Management (PAM) platform. The role is responsible for privileged account onboarding, troubleshooting CyberArk-related incidents, platform health monitoring, access management, compliance support, and collaboration with IAM, SOC, DevOps, application, and vendor teams. This is a Mumbai-based role working rotational shifts (2 days off per week), with shift allowances provided for afternoon and night shifts.

What You Will Do:

1. Design, install, configure, and deploy CyberArk PAM solutions across PAS, PSM, PSMP, and PTA components.
2. Implement and manage EPV/Vault, CPM, PSM, PSM for SSH, and PSM for Web.
3. Onboard privileged accounts across Windows, Unix/Linux, databases, network devices, and applications.
4. Configure safes, password policies, platforms, dual control, and access workflows.
5. Integrate CyberArk with Active Directory, LDAP, and SIEM tools such as Splunk and QRadar.
6. Monitor Vault, PVWA, CPM, PSM, PSMP, and PTA components; analyze logs and alerts for operational/security issues.
7. Provide L2 support for CyberArk incidents, troubleshoot password rotation/CPM/PSM issues, and perform root cause analysis.
8. Participate in Disaster Recovery (DR) drills.
9. Manage user provisioning/de-provisioning, periodic access reviews, and least-privilege compliance.
10. Generate audit and compliance reports; support internal/external audits and SOC investigations involving privileged accounts.
11. Maintain SOPs, runbooks, and documentation; mentor L1 team members.

What We're Looking For:

1. 2+ years of hands-on experience in CyberArk PAM, with working experience across PAS, PSM, PSMP, and PTA.
2. A valid CyberArk certification (e.g., CyberArk Defender or CyberArk Certified Delivery Engineer).
3. Hands-on experience with Central Credential Provider / Central Policy Manager (CP/CCP).
4. Experience troubleshooting CPM/PSM issues and privileged account onboarding.
5. Hands-on experience participating in DR drills.
6. Working knowledge of Windows, Linux/Unix, network devices, and database authentication.
7. Experience with ticketing tools such as ServiceNow or JIRA.
8. Basic scripting/automation knowledge in PowerShell or Python is a plus.
9. Any Graduate; willingness to work rotational shifts.