Cyberark Lead

CyberArk Engineer

We are seeking a skilled CyberArk Engineer to lead and execute the onboarding and lifecycle management of network device and service accounts into the CyberArk PAM solution. This role focuses on ensuring secure, compliant, and automated management of privileged accounts for routers, switches, firewalls, and system-level service accounts across diverse platforms.

Key Responsibilities:

Network Device Onboarding:

• Onboard privileged credentials for network devices (e.g., Cisco, Juniper, Palo Alto, Fortinet) into CyberArk Vault.
• Configure platform settings for network device connection components (SSH/Telnet).
• Develop and manage account verification and password change policies for network platforms.
• Coordinate with Network and Infrastructure teams to ensure secure credential rotation and access logging.
• Work with internal teams and engage with customer on architecture discussion, requirement gathering
• Develop and configure custom connectors/plugin for devices not supported out of the box.

Service Account Onboarding:

• Discover, onboard, and manage Windows and Linux service accounts (manual and automated).
• Manage dependencies of service accounts in services, scheduled tasks, and applications.
• Integrate CyberArk with AD, LDAP, and third-party tools to automate account discovery and management.
• Implement CP/CCP policies for password management and reconciliation.
• Work with internal teams and engage with customer on architecture discussion, requirement gathering

Skills & Qualifications:

• 6–8 years of experience in CyberArk implementation and onboarding.
• Strong understanding of CyberArk components: PVWA, PSM, CP, CCP, CPM, and Vault.
• Experience onboarding:
  • Network devices using SSH/Telnet via CyberArk platforms.
  • Service accounts with dependency mapping and password rotation.
• Scripting knowledge (PowerShell, Python, or REST API) for automation.
• Understanding of privileged access policies and NIST/CIS security frameworks.