Expert CyberArk

ITS Group Benelux; Belgique; Remote; EUR 90,000 - 130,000; Full time

Benefits offered by this job

Hospitalization insurance

Group insurance

Dental insurance

Company car / mobility package

Daily fee provided

Job summary

ITS Group Benelux is seeking a CyberArk Expert to lead the secure migration of an on-prem CyberArk PAM environment to CyberArk SaaS. You will ensure continuity of PAM operations, integrate with AD/Azure AD, SIEM and IAM, and deliver comprehensive migration documentation and runbooks.

The ideal candidate has 10+ years in IT, deep CyberArk architecture knowledge (PVWA, PSM, CPM, Vault), and hands-on SaaS migration experience, with strong French language skills and a customer-focused, collaborative

Qualifications

• Proven experience with CyberArk SaaS / Identity Security Platform / PAM-as-a-Service.
• Proven CyberArk architecture and operations experience including PVWA, PSM, CPM and Vault.
• Experience in PAM migration covering Discovery & Classification, Connector Deployment, Secure Web Sessions, Alero, Conjur and EPM.
• Experience in privileged account provisioning and onboarding.
• Proven CyberArk automation using REST APIs and PowerShell and/or Python.

Responsibilities

• Assess the existing CyberArk environment: accounts, safes, policies, PSM flows and dependencies.
• Define the migration scope for privileged accounts, sensitive systems and integrated applications.
• Analyse the existing CyberArk SaaS target architecture and integration patterns.
• Build the migration roadmap with waves, priorities, risks and rollback plans.
• Configure and use CyberArk tools and APIs; develop customised migration scripts.
• Define onboarding workflows in the SaaS environment and support provisioning.
• Integrate CyberArk with AD, Azure AD, SIEM and IAM environments.
• Produce technical/runbook documentation and conduct knowledge-transfer workshops.

Skills

CyberArk SaaS

CyberArk PVWA

CyberArk PSM

CyberArk CPM

CyberArk Vault

PowerShell

Python scripting

REST APIs

AIM/ASCP

DNA Scanner

Tools

DNA Scanner

Account Migration Tooling

Connector Builder

AIM/ASCP

Job description

Great assignments await you with our key account clients in rich and varied environments

Our client is looking for a CyberArk Expert to support the secure migration of an existing on-premises CyberArk environment to the CyberArk SaaS platform.

The objective is to ensure a complete, secure and documented migration while maintaining the continuity of existing Privileged Access Management (PAM) operations and ensuring smooth integration with the client’s technical environments and internal processes.

The ideal candidate has strong hands-on expertise in CyberArk architecture and operations, proven experience with CyberArk SaaS, and solid experience delivering complex PAM migration and privileged account onboarding initiatives.

• Assess the existing CyberArk environment, including accounts, safes, policies, PSM flows and dependencies.
• Define the migration scope for privileged accounts, sensitive systems and integrated applications.
• Analyse the existing CyberArk SaaS target architecture.
• Define appropriate integration patterns, including connectors, gateways and bastions.
• Build the migration roadmap, including migration waves, priorities, risks and rollback plans.
• Configure and use relevant CyberArk capabilities and tools, including DNA Scanner, AIM/ASCP, Account Migration Tooling and Connector Builder.
• Develop customised migration scripts through CyberArk APIs when required.
• Define onboarding workflows within the SaaS environment.
• Support privileged account provisioning and onboarding.
• Integrate CyberArk with Active Directory, Azure AD, SIEM and IAM environments.
• Produce technical and operational documentation, including target architecture, migration guides, onboarding/offboarding procedures, PAM access and incident procedures, and operational runbooks.
• Conduct knowledge-transfer workshops for internal teams.
• Provide post-migration support, stabilisation and optimisation.
• Deliver a final migration report and recommendations.

You have the following skills

• Proven experience with CyberArk SaaS / Identity Security Platform / PAM-as-a-Service.
• Proven experience in CyberArk architecture and operations, including PVWA, PSM, CPM and Vault.
• Experience in PAM migration covering Discovery & Classification, Connector Deployment, Secure Web Sessions, Alero, Conjur and EPM.
• Experience in privileged account provisioning and onboarding.
• Proven CyberArk automation experience using CyberArk REST APIs and PowerShell and/or Python scripting.
• Proven experience with hardening, segmentation, Zero Trust and bastion environments.
• Proven integration experience with Active Directory, Azure AD, SIEM and IAM.
• Proven ability to produce technical documentation, operational procedures and runbooks.
• Strong analytical capabilities within sensitive and complex technical environments.
• Clear communication with both internal and external stakeholders.
• Experience working within demanding or regulated environments.
• Excellent written and spoken French (CEFR C2).
• You have at least 10 years of professional experiences in IT
• If you are at least fluent in FR it’s best
• You’re eager to learn, motivated and curious
• Let’s have a chat !

Advantages

• Hospitalization insurance (partner/children incl.)
• Group insurance
• Dental insurance (partner/children included)
• 20 days statutory paid vacations (legal vacations cumulated for 1 year of work)
• 11 days recovery time work 38/40 per year (= annual average: 1 day per 20 days worked) if the client asks you to work 8h/day
• Representation fee net per month.
• Internet fee of € 40 per month.
• Company car with national fuel card OR Public transport reimbursed OR mobility package.
• Daily fee of 5.50€ net /day provided.
• Subscription GSM unlimited calls for Belgium (ITS subscription)
• Training plan (e-learning - certification at ITS charge)
• Being a rather small team in BE (6 in back-office), we’re very close to each of our consultants and we differentiate ourselves trying to really take care of you and make you grow with us and within our different clients.
• Regular follow-up (every 3 to 6months depending on your needs/will)
• Regular teambuilding to meet-up and have fun (every 3 months more or less)
• Flexibility and trust
• Benefits of still being part to a bigger group (ITS Group) and having access to resources and of a larger team of Experts
• Co-optation system because sharing is caring!
• 1st pre-screening on the phone to discuss about your search and conditions and our first potential opportunities matching.
• Job descriptions sent and Teams meeting fixed with us (HR and Sales) to dig into your experience and the role.
• Package proposal so we all agree beforehand.
• Your CV is sent to the different clients you’ve agreed to, to find the best mission for you!

For more than 25 years, ITS Group has been a French ESN specializing in digital transformation, employing around 1,400 employees across 8 agencies in France and 1 in Belgium.

Our expertise: IT infrastructure & operations, cloud & managed services, mobility, workstations & networks, strategy, consulting & AMO, cybersecurity, development of business applications.

ITS Group places its CSR commitment at the heart of its concerns by developing sustainable and responsible digital technology and by promoting the professional and personal development of its employees.