CyberArk Engineer

World Wide Technology; Mumbai; On-site; INR 350,000 - 650,000; Full time

Job summary

World Wide Technology, Inc. is seeking an Advanced Technical Support engineer specializing in CyberArk and One Identity to deliver escalated IAM/PAM support across large client environments.

You will drive root-cause analysis, assist with deployments and upgrades, and mentor junior engineers while engaging with customers and stakeholders to improve security postures.

Qualifications

• 3–5+ years of hands-on CyberArk PAM support experience.
• Exposure to One Identity Identity Manager, Governance, or PAM.
• Strong troubleshooting and root-cause analysis for IAM/PAM issues.
• Experience in enterprise or managed services with multiple tenants.

Responsibilities

• Provide expert-level support for CyberArk and One Identity and resolve escalations.
• Investigate privileged access, identity lifecycle, provisioning, and governance workflows.
• Perform root cause analysis for production outages and performance problems.
• Assist with deployment, configuration, upgrades, patch management, and integrations.
• Mentor Level 1/2 engineers and document SOPs for knowledge transfer.
• Engage with customers and stakeholders, offering recommendations and best practices.

Skills

CyberArk PAM expertise

One Identity IAM/PAM

IAM security principles

PowerShell

Python

REST APIs

Automation

Active Directory

LDAP

Azure AD

Troubleshooting IAM/PAM

Windows

Linux

SQL Server

Oracle databases

Education

CyberArk CCD certification

One Identity Certified (Identity Manager/PAM)

Bachelor's degree in CS/IT or related field

Tools

CyberArk EPV/CPM/PSM/PVWA

One Identity Manager

Windows Server

Linux

SQL Server

Oracle

Job description

Advanced Technical Support

• Provide expert-level support for CyberArk (Enterprise Password Vault, Privileged Session Manager, Central Policy Manager, Password Vault Web Access) and One Identity (Identity Manager, Governance, PAM), resolving complex issues escalated from Level 1 and Level 2 support teams.
• Investigate and resolve issues related to privileged access, identity lifecycle management, access provisioning, governance workflows, authentication, and directory integrations.
• Perform root cause analysis for production issues, system outages, and performance problems while ensuring timely resolution.

Implementation, Maintenance Optimization

• Assist with deployment, configuration, upgrades, patch management, and integration of CyberArk and One Identity solutions.
• Monitor system health, capacity, and performance across multiple enterprise client environments.
• Identify opportunities to optimize system performance, workflows, automation, and platform stability.
• Support integrations with Active Directory, LDAP, Microsoft Entra ID (Azure AD), enterprise applications, and security tools.

Security Compliance

• Ensure CyberArk and One Identity environments align with IAM and PAM security best practices, including:
• Role-Based Access Control (RBAC)
• Least Privilege
• Segregation of Duties (SoD)
• Support compliance initiatives across client environments, including GDPR, HIPAA, SOX, and other regulatory requirements.

Documentation Knowledge Management

• Develop and maintain technical documentation, troubleshooting guides, standard operating procedures (SOPs), and knowledge articles.
• Document recurring issues, resolutions, configurations, and best practices.
• Provide knowledge transfer and mentoring to Level 1 and Level 2 engineers.

Customer Stakeholder Engagement

• Act as the technical escalation point for high-priority CyberArk and One Identity incidents.
• Communicate effectively with customers, internal stakeholders, OEM vendors, and cross-functional teams.
• Provide technical recommendations and best practices to improve customer environments.

Experience

• 3-5+ years of hands‑on experience supporting CyberArk PAM solutions, with working experience or exposure to One Identity (Identity Manager, Governance, or PAM).
• Candidates with strong expertise in one platform and a willingness to build proficiency in the other are encouraged to apply.
• Strong experience troubleshooting complex IAM and PAM issues and performing root cause analysis.
• Experience supporting enterprise or managed services environments with multiple customer tenants is preferred.

Technical Skills

• Expertise in CyberArk core components, including:
• Enterprise Password Vault (EPV)
• Central Policy Manager (CPM)
• Privileged Session Manager (PSM)
• Password Vault Web Access (PVWA)
• Hands‑on experience with One Identity Manager (1IM), Identity Governance, and Privileged Access Management (PAM).
• Strong understanding of:
• Active Directory
• LDAP
• Microsoft Entra ID (Azure AD)
• Identity lifecycle management
• User provisioning
• Experience with PowerShell, Python, REST APIs, and automation.
• Familiarity with SQL Server and Oracle databases.
• Working knowledge of Windows, Linux, networking, and SIEM integrations.

Security Compliance

• Strong understanding of IAM and PAM security principles, including RBAC, Least Privilege, and Segregation of Duties.
• Familiarity with regulatory and compliance frameworks, including GDPR, HIPAA, and SOX.

Communication

• Excellent verbal and written communication skills.
• Ability to explain technical concepts to both technical and non‑technical audiences.
• Strong customer engagement and stakeholder management skills.

Certifications (Preferred)

• CyberArk Certified Defender (CCD) preferred.
• One Identity Certified (Identity Manager or equivalent) is a plus.
• CISSP, CISM, CISA, or other IAM/Security certifications are a plus.