Expert CyberArk

ITS Group Benelux; Frasnes-lez-Gosselies; On-site; EUR 90,000 - 120,000; Full time

Benefits offered by this job

Hospitalization insurance

Group insurance

Dental insurance

20 days statutory paid vacations

Company car with national fuel card

Public transport reimbursed

Daily fee net per day

GSM subscription with unlimited calls

Training plan - ITS charge

Job summary

ITS Group Benelux in Belgium seeks a CyberArk Expert to support secure migration from on-prem CyberArk PAM to CyberArk SaaS, ensuring continuity of PAM operations and smooth integration with client environments.

The ideal candidate has hands-on CyberArk architecture experience (PVWA, PSM, CPM, Vault) and strong API scripting skills (PowerShell/Python). Fluency in French is valued; role involves complex, regulated environments.

Qualifications

• Experience with CyberArk SaaS / Identity Security Platform / PAM-as-a-Service.
• CyberArk architecture and operations including PVWA, PSM, CPM and Vault.
• PAM migration covering Discovery & Classification, Connector Deployment, Secure Web Sessions, Alero, Conjur and EPM.
• Privileged account provisioning and onboarding experience.
• CyberArk REST APIs automation with PowerShell and/or Python.

Responsibilities

• Assess the existing CyberArk environment, including accounts, safes, policies and dependencies.
• Define migration scope for privileged accounts, sensitive systems and integrated apps.
• Analyse the CyberArk SaaS target architecture and integration patterns.
• Build migration roadmap with waves, priorities, risks and rollback plans.
• Configure capabilities/tools including DNA Scanner and Connector Builder.
• Develop customised migration scripts via CyberArk APIs as needed.
• Define onboarding workflows within the SaaS environment.
• Support privileged account provisioning and onboarding.
• Integrate CyberArk with AD, Azure AD, SIEM and IAM environments.
• Produce technical/operational documentation and runbooks.
• Conduct knowledge-transfer workshops for internal teams.
• Provide post-migration support, stabilisation and optimisation.
• Deliver final migration report and recommendations.

Skills

CyberArk SaaS

CyberArk architecture

PAM migration

REST APIs

PowerShell

Python

Active Directory integration

French language

Tools

DNA Scanner

AIM/ASCP

Account Migration Tooling

Connector Builder

Job description

About Us :

For more than 25 years, ITS Group has been a French ESN specializing in digital transformation, employing around 1,400 employees across 8 agencies in France and 1 in Belgium.

Our expertise: IT infrastructure & operations, cloud & managed services, mobility, workstations & networks, strategy, consulting & AMO, cybersecurity, development of business applications.

ITS Group places its CSR commitment at the heart of its concerns by developing sustainable and responsible digital technology and by promoting the professional and personal development of its employees.

Find out more: www.itsgroup.com

About the Job :

Great assignments await you with our key account clients in rich and varied environments

Our client is looking for a CyberArk Expert to support the secure migration of an existing on-premises CyberArk environment to the CyberArk SaaS platform.

The objective is to ensure a complete, secure and documented migration while maintaining the continuity of existing Privileged Access Management (PAM) operations and ensuring smooth integration with the client’s technical environments and internal processes.

The ideal candidate has strong hands‑on expertise in CyberArk architecture and operations, proven experience with CyberArk SaaS, and solid experience delivering complex PAM migration and privileged account onboarding initiatives.

• Assess the existing CyberArk environment, including accounts, safes, policies, PSM flows and dependencies.
• Define the migration scope for privileged accounts, sensitive systems and integrated applications.
• Analyse the existing CyberArk SaaS target architecture.
• Define appropriate integration patterns, including connectors, gateways and bastions.
• Build the migration roadmap, including migration waves, priorities, risks and rollback plans.
• Configure and use relevant CyberArk capabilities and tools, including DNA Scanner, AIM/ASCP, Account Migration Tooling and Connector Builder.
• Develop customised migration scripts through CyberArk APIs when required.
• Define onboarding workflows within the SaaS environment.
• Support privileged account provisioning and onboarding.
• Integrate CyberArk with Active Directory, Azure AD, SIEM and IAM environments.
• Produce technical and operational documentation, including target architecture, migration guides, onboarding/offboarding procedures, PAM access and incident procedures, and operational runbooks.
• Conduct knowledge-transfer workshops for internal teams.
• Provide post‑migration support, stabilisation and optimisation.
• Deliver a final migration report and recommendations.

You have the following skills

• Proven experience with CyberArk SaaS / Identity Security Platform / PAM-as-a-Service.
• Proven experience in CyberArk architecture and operations, including PVWA, PSM, CPM and Vault.
• Experience in PAM migration covering Discovery & Classification, Connector Deployment, Secure Web Sessions, Alero, Conjur and EPM.
• Experience in privileged account provisioning and onboarding.
• Proven CyberArk automation experience using CyberArk REST APIs and PowerShell and/or Python scripting.
• Proven experience with hardening, segmentation, Zero Trust and bastion environments.
• Proven integration experience with Active Directory, Azure AD, SIEM and IAM.
• Proven ability to produce technical documentation, operational procedures and runbooks.
• Strong analytical capabilities within sensitive and complex technical environments.
• Clear communication with both internal and external stakeholders.
• Experience working within demanding or regulated environments.
• Excellent written and spoken French (CEFR C2).

Fourchette de salaire :

Salary conform to experience.

About You :

• You have at least 10 years of professional experiences in IT
• If you are at least fluent in FR it’s best
• You’re eager to learn, motivated and curious
• Let’s have a chat !

About the Process :

• 1st pre-screening on the phone to discuss about your search and conditions and our first potential opportunities matching.
• Job descriptions sent and Teams meeting fixed with us (HR and Sales) to dig into your experience and the role.
• Package proposal so we all agree beforehand.
• Your CV is sent to the different clients you’ve agreed to, to find the best mission for you!

Advantages :

• Hospitalization insurance (partner/children incl.)
• Group insurance
• Dental insurance (partner/children included)
• 20 days statutory paid vacations (legal vacations cumulated for 1 year of work)
• 11 days recovery time work 38/40 per year (= annual average: 1 day per 20 days worked) if the client asks you to work 8h/day
• Representation fee net per month.
• Internet fee of € 40 per month.
• Company car with national fuel card OR Public transport reimbursed OR mobility package.
• Daily fee of 5.50€ net /day provided.
• Subscription GSM unlimited calls for Belgium (ITS subscription)
• Training plan (e-learning - certification at ITS charge)

Extra advantages:

• Being a rather small team in BE (6 in back-office), we’re very close to each of our consultants and we differentiate ourselves trying to really take care of you and make you grow with us and within our different clients.
• Regular follow-up (every 3 to 6months depending on your needs/will)
• Regular teambuilding to meet-up and have fun (every 3 months more or less)
• Flexibility and trust
• Benefits of still being part to a bigger group (ITS Group) and having access to resources and of a larger team of Experts
• Co-optation system because sharing is caring!