CyberArk L3 Support Engineer

Persistent Systems; Pune District; On-site; INR 1,800,000 - 3,600,000; Full time

Job summary

Persistent Systems in Pune is seeking an experienced CyberArk L3 Support Engineer with 8–12 years IT experience and 5+ years hands-on CyberArk/PAM engineering. You will provide L3 support, troubleshoot complex issues, and implement PAS solutions across enterprise environments.

The role covers onboarding privileged accounts, integrating with AD/LDAP, SIEM and cloud platforms, performing RCA, upgrades, and automation with PowerShell, Python and REST APIs.

Qualifications

• 8–12 years of IT experience with 5+ years CyberArk and PAM engineering.
• Strong expertise in CyberArk PAS, PVWA, CPM, PSM, Vault, PTA, AIM, and Credential Providers.
• Extensive experience in privileged account onboarding, platform customization, and policy management.
• Proficiency in PowerShell, Python, REST APIs, and automation scripting.
• Strong understanding of Windows, Linux, Active Directory, LDAP, network security, authentication, and access management technologies.
• Experience integrating CyberArk with SIEM, IAM, SSO solutions, cloud platforms, and enterprise applications.
• Knowledge of PAM security best practices, system hardening, compliance requirements, and audit frameworks.
• Hands-on experience in CyberArk version upgrades, migrations, backup and recovery, performance tuning, and troubleshooting.
• Experience supporting large-scale enterprise CyberArk deployments and operations.

Responsibilities

• Provide L3 support and resolve complex CyberArk-related issues across enterprise environments.
• Perform Root Cause Analysis (RCA) for recurring incidents and implement permanent fixes.
• Troubleshoot PVWA, CPM, PSM, Vault, PTA, AIM, and Credential Provider components.
• Resolve session connectivity issues, password rotation failures, and vault communication problems.
• Implement, configure, and manage CyberArk PAS solutions.
• Manage CyberArk infrastructure including PVWA, PSM, CPM, Vault, and Credential Providers.
• Onboard privileged accounts, safes, platforms, applications, and security policies.
• Integrate CyberArk with enterprise systems including Active Directory, LDAP, SIEM, IAM, SSO, and cloud platforms.
• Perform CyberArk upgrades, patching, hardening, backup, restore, and performance tuning activities.
• Conduct periodic access reviews, audit support, compliance reporting, and security assessments.
• Automate CyberArk administration and operational tasks using REST APIs, PowerShell, Python, and custom scripts.
• Support incident response activities related to privileged account security and access management.
• Collaborate with architecture, security, and infrastructure teams to enhance PAM maturity and security posture.
• Develop and maintain technical documentation, procedures, and operational runbooks.

Skills

CyberArk PAM

PAM engineering

PowerShell

Python

REST APIs

Automation scripts

Windows

Linux

Active Directory

LDAP

SIEM

Cloud platforms

DevOps

CI/CD

Documentation

Communication

Stakeholder management

Education

Bachelor's degree

Tools

PVWA

CPM

PSM

Vault

PTA

AIM

Credential Providers

Job description

We are looking for an experienced CyberArk L3 Support Engineer with strong expertise in Privileged Access Management (PAM) and CyberArk solutions. The role involves providing L3 support, troubleshooting complex CyberArk issues, performing root cause analysis, implementing and maintaining CyberArk PAS solutions, and supporting enterprise-scale PAM initiatives. The ideal candidate will have deep technical knowledge of CyberArk components, integrations, automation, and security best practices

• Location: Pune
• Experience: Between 8 to 12 Years
• Job Type: Full Time Employment

What You\'ll Do:

• Provide L3 support and resolve complex CyberArk-related issues across enterprise environments.
• Perform Root Cause Analysis (RCA) for recurring incidents and implement permanent fixes.
• Troubleshoot PVWA, CPM, PSM, Vault, PTA, AIM, and Credential Provider components.
• Resolve session connectivity issues, password rotation failures, and vault communication problems.
• Implement, configure, and manage CyberArk Privileged Access Security (PAS) solutions.
• Manage CyberArk infrastructure including PVWA, PSM, CPM, Vault, and Credential Providers.
• Onboard privileged accounts, safes, platforms, applications, and security policies.
• Integrate CyberArk with enterprise systems including Active Directory, LDAP, SIEM, IAM, SSO, and cloud platforms.
• Perform CyberArk upgrades, patching, hardening, backup, restore, and performance tuning activities.
• Conduct periodic access reviews, audit support, compliance reporting, and security assessments.
• Automate CyberArk administration and operational tasks using REST APIs, PowerShell, Python, and custom scripts.
• Support incident response activities related to privileged account security and access management.
• Collaborate with architecture, security, and infrastructure teams to enhance PAM maturity and security posture.
• Develop and maintain technical documentation, procedures, and operational runbooks.

Expertise You\'ll Bring:

• 8 to 12 years of overall IT experience with a minimum of 5 years of hands-on CyberArk and PAM engineering experience.
• Strong expertise in CyberArk PAS, PVWA, CPM, PSM, Vault, PTA, AIM, and Credential Providers.
• Extensive experience in privileged account onboarding, platform customization, and policy management.
• Strong troubleshooting and support experience across CyberArk environments.
• Proficiency in PowerShell, Python, REST APIs, and automation scripting.
• Strong understanding of Windows, Linux, Active Directory, LDAP, network security, authentication, and access management technologies.
• Experience integrating CyberArk with SIEM, IAM, SSO solutions, cloud platforms, and enterprise applications.
• Knowledge of PAM security best practices, system hardening, compliance requirements, and audit frameworks.
• Hands-on experience in CyberArk version upgrades, migrations, backup and recovery, performance tuning, and troubleshooting.
• Experience supporting large-scale enterprise CyberArk deployments and operations.
• Knowledge of cloud PAM integrations with AWS, Azure, and GCP.
• Exposure to DevOps environments, secrets management, credential rotation, and CI/CD pipeline integrations.
• CyberArk certifications such as Defender, Sentry, or Guardian preferred.
• Strong documentation, communication, stakeholder management, and problem-solving skills.
• Ability to work effectively in global support environments covering US and EU business hours.
• Educational background: Bachelor's degree in a relevant discipline or equivalent practical experience.
• Competitive salary and benefits package
• Culture focused on talent development with quarterly growth opportunities and company-sponsored higher education and certifications
• Opportunity to work with cutting-edge technologies
• Employee engagement initiatives such as project parties, flexible work hours, and Long Service awards
• Insurance coverage: group term life, personal accident, and Mediclaim hospitalization for self, spouse, two children, and parents

Values-Driven, People-Centric & Inclusive Work Environment:

Persistent is dedicated to fostering diversity and inclusion in the workplace. We invite applications from all qualified individuals, including those with disabilities, and regardless of gender or gender preference. We welcome diverse candidates from all backgrounds.

• We support hybrid work and flexible hours to fit diverse lifestyles.
• Our office is accessibility-friendly, with ergonomic setups and assistive technologies to support employees with physical disabilities.
• If you are a person with disabilities and have specific requirements, please inform us during the application process or at any time during your employment

Let\’s unleash your full potential at Persistent - persistent.com/careers

“Persistent is an Equal Opportunity Employer and prohibits discrimination and harassment of any kind.”