CyberArk Operations Engineer

UST; Bengaluru; On-site; INR 900,000 - 2,100,000; Full time

Job summary

UST in Bengaluru seeks an experienced CyberArk Operations Engineer to manage and secure the Privileged Access Management environment. You will handle lifecycle management, platform stability, and BAU support for CyberArk PAM, PVWA, PSM, and EPM.

This role requires 5–8 years of hands-on experience, strong troubleshooting of privileged access issues, and collaboration with application and infrastructure teams. On-call 24x7 support may be required.

Qualifications

• 5–8 years of CyberArk PAM administration and operations experience.
• Hands-on production support experience with CyberArk PAM.
• Hands-on CyberArk Endpoint Privilege Manager (EPM) experience.
• Experience implementing EPM policies and least privilege controls.
• Basic PowerShell scripting and automation knowledge.
• Familiarity with Incident, Problem and Change Management processes.
• Knowledge of Linux administration and log analysis is a plus.

Responsibilities

• Provide operational support and administration for the CyberArk PAM platform.
• Manage privileged account onboarding, Safe creation, maintenance, and policy configurations.
• Troubleshoot password rotation issues and privileged access incidents.
• Administer PVWA and user access management.
• Support PSM and CyberArk EPM operations.
• Onboard new platforms and privileged accounts via SOPs.
• Implement PAM enhancements and operational improvements.
• Design and optimize CyberArk EPM policies for local admin rights and application privilege elevation.
• Assist with platform upgrades, feature enablement, and policy enhancements.
• Investigate production incidents, perform RCA, and coordinate resolution.
• Maintain SOPs and knowledge base articles.
• Participate in 24x7 support, including on-call as required.

Skills

CyberArk PAM administration

PAM production support

CyberArk EPM

EPM policy implementation

PowerShell scripting

Incident/Problem/Change Mgmt

Linux log analysis

Tools

PVWA

PowerShell

EPM

Job description

Role Overview

The CyberArk Operations Engineer will be responsible for the operational support and administration of the CyberArk Privileged Access Management (PAM) platform. This role focuses on privileged account lifecycle management, platform stability, secure access operations, and day-to-day platform support. In addition to business-as-usual (BAU) operations, the engineer will contribute to platform enhancements, CyberArk Endpoint Privilege Manager (EPM) policy implementation, and minor engineering initiatives to improve the overall PAM environment.

Key Responsibilities

• Provide operational support and administration for the CyberArk PAM platform.
• Manage privileged account onboarding, Safe creation and maintenance, and policy configurations.
• Troubleshoot CPM password rotation issues and privileged access-related incidents.
• Administer PVWA, including user access management and configuration support.
• Provide operational support for PSM and CyberArk Endpoint Privilege Manager (EPM).
• Execute standard operating procedure (SOP)-based onboarding of platforms, systems, and privileged accounts.
• Perform minor PAM enhancements, configuration updates, and operational improvements.
• Design, implement, and optimize CyberArk EPM policies for:
• Local administrator rights management
• Application privilege elevation
• Application control
• Endpoint privilege management and security governance
• Support onboarding of new applications, platforms, and privileged account use cases beyond standard operational activities.
• Assist with CyberArk platform upgrades, feature enablement, policy enhancements, and continuous service improvements.
• Support operational issues related to secrets management, including:
• Client secret rotation failures
• SSL certificate propagation issues
• Investigate production incidents, perform root cause analysis (RCA), and coordinate resolution with application and infrastructure teams.
• Maintain operational documentation, SOPs, and knowledge base articles.
• Participate in a 24×7 support model, including on-call support as required.

Required Skills

• 5–8 years of experience in CyberArk PAM administration and operations.
• Strong hands‑on experience with CyberArk PAM in production support environments.
• Strong hands‑on experience with CyberArk Endpoint Privilege Manager (EPM), including:
• Local administrator rights management
• Application privilege elevation
• Application control policy implementation
• Endpoint privilege management
• Endpoint security governance
• Experience implementing, enhancing, and maintaining CyberArk EPM policies in enterprise environments.
• Good understanding of privileged access security principles and the least privilege model.
• Experience supporting enterprise PAM platforms in production environments.
• Strong troubleshooting skills for privileged access, password management, and platform‑related issues.
• Familiarity with Incident, Problem, and Change Management processes.
• Basic knowledge of PowerShell scripting and automation.

Preferred Skills (Added Advantage)

• Working knowledge of Microsoft Entra ID administration and support.
• Exposure to secrets management and certificate lifecycle management.
• Basic Linux administration and log analysis skills.
• Experience with CyberArk platform upgrades, migrations, or implementation projects.
• Hands‑on experience with SailPoint Identity Security Cloud (ISC), including administration, operations, and troubleshooting.

Skills

CyberArk, Privileged Access Management, PKI, Change Management, Incident Management, Log Analysis, Problem Management, Microsoft Entra ID, SailPoint, Linux