Cybersecurity Engineer

Techconnect; Jakarta Pusat; On-site; IDR 167,400,000 - 334,800,000; Full time

Benefits offered by this job

Private Health Insurance

Pension Plan

Training & Development

Performance Bonus

Job summary

Techconnect is seeking a CyberArk Engineer to install, configure, and manage PAM components across Windows, Linux, and databases. You will integrate with AD/LDAP and SSO, rotate credentials, and support CPM/PSM plugins for a range of platforms.

You’ll onboard logs to SIEM tools like Google Chronicle or Elastic Security, work with ITSM (ServiceNOW/JIRA), and produce runbooks and SOPs. On-the-job training is provided for less familiar areas.

Qualifications

• Hands-on experience as a CyberArk Engineer (L1/L2/L3), including installation, configuration, troubleshooting, and technical support for CyberArk PAM platforms in enterprise or multi-client environments.

Responsibilities

• Install, configure, and administer CyberArk components including Vault, PVWA, CPM, PSM, PSMP, and Privilege Cloud; manage Safes, Policies, and onboarding of privileged accounts (Windows, Linux, databases, and service accounts).
• Integrate CyberArk with Active Directory/LDAP, SSO, and network platforms (Cisco, Palo Alto, Fortinet); manage credential rotation, session recording, and development of CPM/PSM WebApp plugins.
• Handle L2 technical support tickets from clients related to infrastructure issues, third-party integrations, and CyberArk platform performance; coordinate with vendors and R&D teams to resolve complex issues.
• Support onboarding of CyberArk logs (Vault audit logs, PSM session logs) into SIEM platforms such as Google SecOps (Chronicle) and/or Elastic Security; internal training will be provided for candidates who are not yet familiar with these platforms.
• Ensure the health and availability of the CyberArk platform operate optimally; use ITSM tools (ServiceNOW/JIRA) for ticket management, configuration changes, and incident documentation.
• Prepare runbooks, SOPs, and technical documentation for CyberArk implementations; provide training and knowledge transfer to users and the client’s internal IT teams.
• Perform other cybersecurity engineering activities as needed.

Skills

CyberArk PAM

Active Directory/LDAP

SSO

Windows Server Admin

Linux Server Admin

Networking

ITSM (ServiceNOW/JIRA)

Cloud platforms

Tools

Google SecOps

Elastic Security

Chronicle

Python/Bash/PowerShell

Job description

• [CyberArk PAM — Core] Install, configure, and administer CyberArk components including Vault, PVWA, CPM, PSM, PSMP, and Privilege Cloud; manage Safes, Policies, and onboarding of privileged accounts (Windows, Linux, databases, and service accounts).
• [CyberArk PAM — Integration] Integrate CyberArk with Active Directory/LDAP, SSO, and network platforms (Cisco, Palo Alto, Fortinet); manage credential rotation, session recording, and development of CPM/PSM WebApp plugins.
• [CyberArk PAM — Support] Handle L2 technical support tickets from clients related to infrastructure issues, third-party integrations, and CyberArk platform performance; coordinate with vendors and R&D teams to resolve complex issues.
• [SIEM — Onboarding] Support onboarding of CyberArk logs (Vault audit logs, PSM session logs) into SIEM platforms such as Google SecOps (Chronicle) and/or Elastic Security; internal training will be provided for candidates who are not yet familiar with these platforms.
• [Operations & Monitoring] Ensure the health and availability of the CyberArk platform operate optimally; use ITSM tools (ServiceNOW/JIRA) for ticket management, configuration changes, and incident documentation.
• [Documentation & Knowledge Transfer] Prepare runbooks, SOPs, and technical documentation for CyberArk implementations; provide training and knowledge transfer to users and the client’s internal IT teams.
• [Cybersecurity Engineering] Perform other cybersecurity engineering activities as needed.

• CyberArk PAM (Vault, PVWA, CPM, PSM, PSMP, Privilege Cloud), Active Directory / LDAP, SSO, Windows & Linux Server Administration, Networking (TCP/IP, VLAN, Firewall — Cisco / Palo Alto / Fortinet), ITSM (ServiceNOW/JIRA).
• Google SecOps (Chronicle), Elastic Security / Elastic Stack, basic scripting (Python/Bash/PowerShell), cloud platforms (GCP/AWS/Azure); candidates will receive on-the-job training in these areas.
• Proactive in troubleshooting and problem-solving, strong technical communication skills with clients (including global clients), detail-oriented in documentation, able to work independently as well as in cross-functional teams, and committed to information confidentiality.
• Nice to have certification: CyberArk Defender - PAM | Target: CyberArk Sentry - PAM | Google SecOps Training (on-the-job).
• Hands-on experience as a CyberArk Engineer (L1/L2/L3), including installation, configuration, troubleshooting, and technical support for CyberArk PAM platforms in enterprise or multi-client environments.
• Experience managing Active Directory (user/group management, GPO, integration with security applications) and handling technical tickets using ITSM tools.
• Experience with enterprise network platforms (Cisco, Palo Alto, Fortinet) is a plus. Experience with SIEM platforms (any) or Google SecOps / Elastic is an advantage, but not mandatory — training will be provided.

• Private Health Insurance
• Pension Plan
• Training & Development
• Performance Bonus