CyberArk Specialist

Sasso Consulting (Pty) Ltd; Johannesburg; On-site; ZAR 520,000 - 980,000; Full time

Job summary

Sasso Consulting (Pty) Ltd seeks a seasoned CyberArk Specialist to implement, configure and manage Privileged Access Management across on‑premises, cloud and hybrid environments. You will secure privileged accounts, manage access to critical systems and ensure compliance with security policies.

The role requires hands-on CyberArk expertise, session monitoring, password vaulting and strong identity security knowledge to support risk management and governance.

Qualifications

• Relevant diploma or degree in Information Technology, Computer Science, Information Systems, Cybersecurity or a related discipline.
• Typically 3–5 years of relevant experience in cybersecurity, identity security, privileged access management or enterprise security administration.
• Proven hands-on experience implementing, configuring or administering CyberArk PAM solutions.
• Strong practical knowledge of CyberArk Digital Vault, PVWA, CPM and PSM components.
• Experience onboarding and managing privileged accounts within CyberArk.
• Understanding of privileged account lifecycle management, password rotation and credential vaulting.

Responsibilities

• Install, configure, administer and maintain CyberArk Privileged Access Management solutions.
• Support the implementation, integration and ongoing operation of CyberArk security components.
• Configure and manage CyberArk Digital Vault, PVWA, CPM and PSM.
• Onboard privileged accounts, service accounts and administrative credentials into CyberArk.
• Configure and maintain safes, platforms, policies and privileged access workflows.
• Implement automated password management, rotation, verification and reconciliation processes.
• Monitor CyberArk platform health, availability, performance and security events.
• Troubleshoot CyberArk infrastructure, connectivity, authentication and privileged session issues.
• Support CyberArk platform upgrades, patching, maintenance and system improvements.

Skills

CyberArk PAM

PVWA

PSM

CPM

Privileged Access

Automation

Education

Diploma/degree in IT or Cybersecurity

Tools

CyberArk Privileged Access Manager

CyberArk Digital Vault

PVWA

CPM

PSM

Password Vaulting

Job description

CyberArk Specialist

Location: Centurion, Gauteng (provisional – to be confirmed)
Positions Available: 5
Salary: Market-related
Employment Type: To be confirmed

Job Overview

We are seeking experienced and technically proficient CyberArk Specialists to implement, configure, administer, maintain and optimise Privileged Access Management (PAM) solutions within complex enterprise IT environments.

The successful candidates will be responsible for securing privileged accounts, managing access to critical systems and infrastructure, and ensuring that privileged access controls align with organisational security policies, regulatory requirements and industry best practices.

This role requires strong hands-on expertise in CyberArk Privileged Access Management technologies, privileged account lifecycle management, password vaulting, session monitoring, access control and enterprise security integration.

The ideal candidates will have proven experience deploying, administering and troubleshooting CyberArk solutions across on-premises, cloud and hybrid environments, with a strong understanding of identity security, cybersecurity risk management and privileged access governance.

Key Responsibilities

CyberArk Implementation and Administration

• Install, configure, administer and maintain CyberArk Privileged Access Management solutions.
• Support the implementation, integration and ongoing operation of CyberArk security components.
• Configure and manage CyberArk Digital Vault, Privileged Vault Web Access (PVWA), Central Policy Manager (CPM) and Privileged Session Manager (PSM).
• Onboard privileged accounts, service accounts and administrative credentials into CyberArk.
• Configure and maintain safes, platforms, policies, permissions and privileged access workflows.
• Implement automated password management, rotation, verification and reconciliation processes.
• Monitor CyberArk platform health, availability, performance and security events.
• Troubleshoot CyberArk infrastructure, connectivity, authentication and privileged session issues.
• Support CyberArk platform upgrades, patching, maintenance and system improvements.

Privileged Access Management and Security

• Implement and enforce privileged access controls based on least-privilege and Zero Trust security principles.
• Secure administrative access to servers, databases, network devices, applications and cloud platforms.
• Manage privileged account provisioning, access requests, approvals and revocation processes.
• Configure privileged session isolation, monitoring and recording.
• Identify and remediate unmanaged, excessive or inappropriate privileged access.
• Implement controls to reduce credential theft, privilege escalation and unauthorised administrative access.
• Support privileged account discovery, onboarding and lifecycle management.
• Maintain privileged access policies and operational procedures.

CyberArk Integration and Automation

• Integrate CyberArk with Microsoft Active Directory, Microsoft Entra ID and enterprise authentication services.
• Configure CyberArk integrations with Windows, Linux, Unix, databases, network infrastructure and enterprise applications.
• Support integrations with SIEM, ITSM and identity governance platforms.
• Develop and maintain automation scripts using PowerShell, REST APIs or other relevant technologies.
• Support automated privileged account onboarding and password management workflows.
• Assist with securing application credentials, service accounts and machine identities.
• Support CyberArk integrations with cloud and hybrid infrastructure environments.

Monitoring, Compliance and Risk Management

• Monitor privileged access activities, security events and policy violations.
• Investigate privileged access incidents, authentication failures and suspicious activities.
• Generate privileged access reports, audit logs and compliance documentation.
• Support internal and external security audits relating to privileged account management.
• Conduct privileged access reviews and recommend corrective actions.
• Maintain accurate records of privileged accounts, access permissions and security configurations.
• Ensure privileged access controls align with ISO 27001, NIST and applicable security policies.
• Assist with security risk assessments and remediation of privileged access vulnerabilities.

Technical Support and Continuous Improvement

• Provide technical support for CyberArk-related incidents, problems and service requests.
• Collaborate with cybersecurity, infrastructure, application, database and cloud teams.
• Investigate and resolve complex CyberArk platform and integration issues.
• Participate in privileged access security projects, migrations and infrastructure upgrades.
• Identify opportunities to improve PAM processes, automation and platform performance.
• Develop and maintain technical documentation, configuration guides and standard operating procedures.
• Support disaster recovery planning and resilience testing for CyberArk infrastructure.
• Stay informed about emerging privileged access threats, CyberArk technologies and cybersecurity best practices.

Minimum Requirements

• Relevant diploma or degree in Information Technology, Computer Science, Information Systems, Cybersecurity or a related discipline.
• Typically 3–5 years of relevant experience in cybersecurity, identity security, privileged access management or enterprise security administration.
• Proven hands-on experience implementing, configuring or administering CyberArk PAM solutions.
• Strong practical knowledge of CyberArk Digital Vault, PVWA, CPM and PSM components.
• Experience onboarding and managing privileged accounts within CyberArk.
• Understanding of privileged account lifecycle management, password rotation and credential vaulting.
• Experience configuring CyberArk safes, platforms, policies and access permissions.
• Strong working knowledge of Microsoft Active Directory and Windows Server environments.
• Familiarity with Linux/Unix operating systems and enterprise infrastructure.
• Experience troubleshooting CyberArk authentication, connectivity and session management issues.
• Understanding of privileged access security principles, including least privilege and Zero Trust.
• Knowledge of enterprise identity and access management concepts.
• Familiarity with security frameworks such as ISO 27001 and NIST.
• Strong technical troubleshooting, analytical and documentation skills.

Technical Skills and Competencies

CyberArk Core Technologies

Practical experience with the following technologies is highly desirable:

• CyberArk Privileged Access Manager
• CyberArk Digital Vault
• Privileged Vault Web Access (PVWA)
• Central Policy Manager (CPM)
• Privileged Session Manager (PSM)
• CyberArk Password Vaulting
• CyberArk Safes and Platforms
• CyberArk Privileged Account Discovery
• CyberArk Privileged Session Monitoring

Privileged Access Management

• Privileged account onboarding and offboarding
• Automated password rotation and reconciliation
• Credential vaulting and secure password management
• Privileged session isolation and recording
• Least-privilege access management
• Role-Based Access Control (RBAC)
• Privileged access approvals and workflows
• Privileged account discovery and inventory management
• Privileged access governance and compliance

Identity and Directory Services

• Microsoft Active Directory
• Microsoft Entra ID
• LDAP
• Kerberos
• Enterprise authentication and authorisation
• Identity federation and access management
• Multi-Factor Authentication (MFA)

Infrastructure and Operating Systems

• Windows Server
• Linux and Unix
• Enterprise networking fundamentals
• Database administration security concepts
• Network device privileged access
• Virtualisation and hybrid infrastructure environments

Automation and Integration

• PowerShell scripting
• REST APIs
• CyberArk REST API
• CyberArk Password Vault Web Access API
• Automated account onboarding
• ServiceNow or equivalent ITSM integration
• SIEM integration
• Enterprise application and database integration

Cloud and Advanced Privileged Access Security

Experience with the following would be advantageous:

• CyberArk Privilege Cloud
• CyberArk Endpoint Privilege Manager (EPM)
• CyberArk Secrets Manager / Conjur
• CyberArk Secure Cloud Access
• Microsoft Azure privileged access security
• AWS privileged access management
• DevOps secrets management
• Cloud and hybrid identity security

Security Frameworks and Standards

• ISO/IEC 27001
• NIST Cybersecurity Framework
• NIST SP 800-53
• CIS Critical Security Controls
• Zero Trust security architecture
• Enterprise privileged access policies
• POPIA and applicable information security requirements

Relevant Certifications (Advantageous)

One or more of the following certifications would be beneficial:

• CyberArk Certified Defender
• CyberArk Certified Sentry
• CyberArk Certified Guardian
• CyberArk Privileged Access Manager certifications
• CyberArk Privilege Cloud certifications
• CyberArk Endpoint Privilege Manager certifications
• Microsoft Certified: Identity and Access Administrator Associate (SC-300)
• CompTIA Security+
• Certified Information Systems Security Professional (CISSP)
• Certified Information Security Manager (CISM)
• Relevant Microsoft Azure, AWS or privileged access security certifications

Key Personal Attributes

• Strong technical troubleshooting and problem-solving abilities.
• Excellent attention to detail and security awareness.
• Ability to manage complex privileged access environments.
• Strong analytical and investigative skills.
• Proactive approach to identifying and resolving security vulnerabilities.
• Excellent communication and stakeholder engagement abilities.
• Ability to collaborate effectively with cybersecurity and infrastructure teams.
• Strong organisational and technical documentation skills.
• Ability to manage multiple technical incidents, projects and priorities.
• High levels of confidentiality, integrity and professional accountability.