Cyberark L3 Operational Engineer

Orbus International; Chennai District; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

Orbus International in Chennai is seeking a CyberArk L3 Operations Engineer responsible for advanced operational support, troubleshooting, and upgrades across the Privileged Access Management platform.

You will handle complex incidents, perform root cause analysis, deploy patches, integrate systems, and develop runbooks with on-call rotation. The role includes ensuring high availability and compliance for privileged access across enterprise systems.

Qualifications

• Strong expertise in CyberArk PAM components (Vault, PVWA, CPM, PSM, PTA).
• Proficiency in Windows and Linux administration, AD, and basic networking concepts.
• Experience with CyberArk REST APIs, PowerShell scripting, and automation.
• Familiarity with ITIL processes and service management tools (ServiceNow/Jira).
• Understanding of PAM concepts: credential rotation, session management, least privilege.

Responsibilities

• Handle L3 escalations for CyberArk components (Vault, PVWA, CPM, PSM, PTA).
• Perform root cause analysis and implement permanent fixes for recurring issues.
• Apply patches, perform version upgrades, and ensure platform stability.
• Monitor system health and performance; implement proactive measures.
• Develop and maintain integrations with Windows, Linux, AD, databases, and cloud services.
• Customize workflows and policies using CyberArk APIs and scripts.
• Create scripts for onboarding, health checks, and reporting using PowerShell and REST APIs.
• Ensure PAM processes meet internal security standards and regulatory requirements (SOX, PCI DSS).
• Provide evidence for audits and certification campaigns.
• Collaborate with L2 teams, architects, and application owners; provide knowledge transfer and runbooks.

Skills

CyberArk PAM

Windows Admin

Linux Admin

Active Directory

PowerShell

REST APIs

Automation

ITIL

ServiceNow

Jira

Networking basics

Tools

ServiceNow

Jira

Job description

Role Overview

The CyberArk L3 Operations Engineer is responsible for advanced operational support, troubleshooting, and optimization of the CyberArk Privileged Access Management platform. This role handles complex incidents, root cause analysis, platform upgrades, and integrations, ensuring high availability and compliance for privileged access across enterprise systems.

Key Responsibilities

• Handle L3 escalations for CyberArk components (Vault, PVWA, CPM, PSM, PTA).
• Perform root cause analysis and implement permanent fixes for recurring issues.
• Apply patches, perform version upgrades, and ensure platform stability.
• Monitor system health and performance; implement proactive measures.
• Develop and maintain integrations with target systems (Windows, Linux, AD, databases, cloud).
• Customize workflows and policies using CyberArk APIs and scripts.
• Create scripts for onboarding, health checks, and reporting using PowerShell and REST APIs.
• Ensure PAM processes meet internal security standards and regulatory requirements (SOX, PCI DSS).
• Provide evidence for audits and certification campaigns.
• Work with L2 teams, architects, and application owners; provide knowledge transfer and runbooks.

Required Skills

• Strong expertise in CyberArk PAM components (Vault, PVWA, CPM, PSM, PTA).
• Proficiency in Windows/Linux administration, Active Directory, and network fundamentals.
• Experience with CyberArk REST APIs, PowerShell scripting, and automation.
• Familiarity with ITIL processes and service management tools (ServiceNow/Jira).
• Understanding of PAM concepts: credential rotation, session management, least privilege.

Preferred Skills

• Exposure to cloud PAM and hybrid environments.
• Certifications: CyberArk Guardian/Defender, ITIL Foundation.
• Knowledge of DevOps practices and CI/CD integration for PAM.

Key Performance Indicators (KPIs)

• SLA compliance for L3 incidents and problems.
• Successful completion of platform upgrades and migrations.
• Reduction in audit findings related to privileged access.
• Platform uptime and performance metrics.

Working Model

5 days working from office with on-call rotation for critical incidents. Collaboration with global IAM teams and business units.

Tools & Technologies

• CyberArk PAM platform (Vault, PVWA, CPM, PSM, PTA)
• Windows/Linux OS
• Active Directory
• ITSM Tools: ServiceNow, Jira
• Automation: PowerShell, REST APIs