CyberArk L3 Engineer

Us3 Consulting; Amsterdam; On-site; EUR 90,000 - 120,000; Full time

Job summary

Us3 Consulting is seeking an experienced CyberArk L3 Engineer to manage and enhance the organization's PAM environment.

The ideal candidate will be proficient with PVWA, CPM, PSM, and PSMP, with hands-on experience onboarding privileged accounts and implementing DR/HA strategies. Collaboration with project teams and capability to automate via CyberArk APIs is preferred.

Qualifications

• 6-8 years of IT experience with CyberArk PAM.
• Hands-on with PVWA, CPM, PSM, PSMP.
• Onboarding privileged accounts; Safe administration.
• Experience upgrading, migrating, and patching CyberArk.
• Knowledge of DR, HA, failover, and rollback procedures.
• Integrations with AD, LDAP, MFA, SAML, and Azure SSO.
• Experience with Windows, databases, applications, and service accounts.
• Familiarity with Oracle, SQL Server, MySQL, and Sybase databases.
• Strong troubleshooting and incident resolution.

Responsibilities

• Administer and support CyberArk PAS infrastructure.
• Manage CyberArk core components: PVWA, CPM, PSM, PSMP.
• Perform CyberArk upgrades, patching, maintenance, health checks.
• Onboard privileged Windows, Linux, database, application, and service accounts.
• Configure and administer Safes, Platforms, Users, and Access Policies.
• Execute Disaster Recovery, failover, and failback.

Skills

CyberArk PAM

PVWA

CPM

PSM

PSMP

Onboarding privileged accounts

High Availability

AD integration

LDAP integration

SAML SSO

Azure SSO

Automation via CyberArk APIs

AAM knowledge

Troubleshooting

Tools

Oracle

Microsoft SQL Server

MySQL

Sybase

Job description

Location: Amsterdam, Netherlands

Job Summary

We are seeking an experienced CyberArk L3 Engineer to manage, maintain, and enhance the organization's CyberArk Privileged Access Management (PAM) environment. The ideal candidate will have strong expertise in CyberArk core components, privileged account onboarding, platform upgrades, disaster recovery, and IAM integrations. This role requires hands-on experience supporting enterprise CyberArk deployments while ensuring security, compliance, and operational excellence.

Key Responsibilities

• Administer and support CyberArk Privileged Access Security (PAS) infrastructure.
• Manage and maintain CyberArk core components including:
• Password Vault Web Access (PVWA)
• Privileged Session Manager (PSM)
• Privileged Session Manager Proxy (PSMP)
• Perform CyberArk version upgrades, patching, maintenance, and health checks.
• Onboard privileged Windows, Linux, database, application, and service accounts into CyberArk.
• Configure and administer Safes, Platforms, Users, and Access Policies.
• Execute Disaster Recovery (DR), failover, and failback activities.
• Design and implement High Availability (HA) solutions for CyberArk infrastructure.
• Integrate CyberArk with:
• Active Directory (AD)
• LDAP
• SAML-based Single Sign-On (SSO)
• Collaborate with project teams during CyberArk implementation and PAM deployments.
• Generate operational reports and provide L3 support for production issues.
• Ensure CyberArk platform security, compliance, and adherence to security best practices.
• Customize connection components and plugins where required (preferred).
• Support automation using CyberArk APIs and Application Access Manager (AAM) where applicable.

Required Skills

• 6-8 years of IT experience with strong expertise in CyberArk Privileged Access Management (PAM).
• Hands-on experience with CyberArk PAS Core Components:
• PVWA
• CPM
• PSM
• PSMP
• Strong experience in privileged account onboarding and Safe administration.
• Experience performing CyberArk upgrades, migrations, and patch management.
• Knowledge of Disaster Recovery, High Availability, failover, and rollback procedures.
• Experience integrating CyberArk with AD, LDAP, MFA, SAML, and Azure SSO.
• Strong understanding of enterprise security and privileged identity management.
• Experience managing privileged access for:
• Windows
• Databases
• Applications
• Service Accounts
• Familiarity with Oracle, Microsoft SQL Server, MySQL, and Sybase databases.
• Good troubleshooting and incident resolution skills.

Preferred Skills

• Experience with CyberArk Application Access Manager (AAM).
• Experience using CyberArk REST APIs for automation.
• Knowledge of custom connection components and plugin development.
• Understanding of enterprise IAM and Zero Trust security principles.
• Experience in enterprise Cyber Security environments.