CyberArk L3 Support Engineer

iFocal Solutions Pvt Ltd; Pune District; On-site; INR 1,800,000 - 2,800,000; Full time

Job summary

iFocal Solutions Pvt Ltd is seeking an experienced CyberArk L3 Support Engineer to join our team in Pune. The role focuses on providing L3 support, troubleshooting complex CyberArk issues, and performing root cause analysis across enterprise environments.

The ideal candidate will have 8–15 years of IT experience with at least 5 years hands-on CyberArk and PAM engineering expertise, handling PVWA/PSM/Vault/AIM, and automating tasks via REST APIs, PowerShell, and Python.

Qualifications

• 8–15 years of IT experience with a minimum of 5 years hands-on CyberArk and PAM engineering experience.
• Strong expertise in CyberArk PAS, PVWA, CPM, PSM, Vault, PTA, AIM, and credential providers.
• Extensive experience in privileged account onboarding, platform customization, and policy management.
• Strong troubleshooting and support experience across CyberArk environments.
• Proficiency in PowerShell, Python, REST APIs, and automation scripting.

Responsibilities

• Provide L3 support and resolve complex CyberArk-related issues across enterprise environments.
• Perform root cause analysis for recurring incidents and implement permanent fixes.
• Troubleshoot PVWA, CPM, PSM, Vault, PTA, AIM, and Credential Provider components.
• Automate CyberArk administration and operational tasks using REST APIs, PowerShell, Python, and custom scripts.
• Conduct periodic access reviews, audit support, compliance reporting, and security assessments.

Skills

CyberArk

PAM engineering

PVWA

PSM

Vault

AIM

Credential Providers

PowerShell

Python

REST APIs

Automation scripting

Windows

Linux

Active Directory

LDAP

SIEM

IAM

SSO

Cloud platforms

Tools

DevOps environments (exposure)

Job description

We are looking for an experienced CyberArk L3 Support Engineer for one of our esteemed clients with strong expertise in Privileged Access Management (PAM) and CyberArk solutions. The role involves providing L3 support, troubleshooting complex CyberArk issues, performing root cause analysis, implementing and maintaining CyberArk PAS solutions, and supporting enterprise-scale PAM initiatives. The ideal candidate will have deep technical knowledge of CyberArk components, integrations, automation, and security best practices.

• Experience: 8 to 15 years
• Job Type: Full-Time Employment
• Provide L3 support and resolve complex CyberArk-related issues across enterprise environments.
• Perform Root Cause Analysis (RCA) for recurring incidents and implement permanent fixes.
• Troubleshoot PVWA, CPM, PSM, Vault, PTA, AIM, and Credential Provider components.
• Resolve session connectivity issues, password rotation failures, and vault communication problems.
• Implement, configure, and manage CyberArk Privileged Access Security (PAS) solutions.
• Manage CyberArk infrastructure, including PVWA, PSM, CPM, Vault, and Credential Providers.
• Onboard privileged accounts, safes, platforms, applications, and security policies.
• Integrate CyberArk with enterprise systems, including Active Directory, LDAP, SIEM, IAM, SSO, and cloud platforms.
• Perform CyberArk upgrades, patching, hardening, backup, restore, and performance tuning activities.
• Conduct periodic access reviews, audit support, compliance reporting, and security assessments.
• Automate CyberArk administration and operational tasks using REST APIs, PowerShell, Python, and custom scripts.
• Support incident response activities related to privileged account security and access management.
• Collaborate with architecture, security, and infrastructure teams to enhance PAM maturity and security posture.
• Develop and maintain technical documentation, procedures, and operational runbooks.

Expertise You'll Bring:

• 8? 12 years of overall IT experience with a minimum of 5 years of hands-on CyberArk and PAM engineering experience.
• Strong expertise in CyberArk PAS, PVWA, CPM, PSM, Vault, PTA, AIM, and credential providers.
• Extensive experience in privileged account onboarding, platform customization, and policy management.
• Strong troubleshooting and support experience across CyberArk environments.
• Proficiency in PowerShell, Python, REST APIs, and automation scripting.
• Strong understanding of Windows, Linux, Active Directory, LDAP, network security, authentication, and access management technologies.
• Experience integrating CyberArk with SIEM, IAM, SSO solutions, cloud platforms, and enterprise applications.
• Knowledge of PAM security best practices, system hardening, compliance requirements, and audit frameworks.
• Hands-on experience in CyberArk version upgrades, migrations, backup and recovery, performance tuning, and troubleshooting.Experience supporting large-scale enterprise CyberArk deployments and operations.
• Knowledge of cloud PAM integrations with AWS, Azure, and GCP.
• Exposure to DevOps environments, secrets management, credential rotation, and CI/CD pipeline integrations.
• CyberArk certifications such as Defender, Sentry, or Guardian preferred.
• Strong documentation, communication, stakeholder management, and problem-solving skills.
• Ability to work effectively in global support environments covering US and EU business hours.