CyberArk L3 Engineer

Location: Bangalore (offshore) | Type: Full-time | Reports to: Global IAM Lead

Wise Analytics is a data- and AI-first advisory and engineering firm that designs, builds and operates secure, cloud-native platforms for Fortune-grade clients worldwide. Our Identity & Access Management guild delivers privileged-access solutions that are resilient, compliant and continuously optimised through automation and analytics.

We seek an experienced CyberArk L3 Engineer to act as the highest technical escalation point for our global PAM environment. The role combines advanced troubleshooting, platform enhancement and knowledge transfer to ensure 24×7 service availability while meeting stringent security and regulatory standards.

• Provide L3 incident resolution for CyberArk suite: Vault, PVWA, CPM, PSM, PSMP, PTA, AAM, Conjur and EPM.
• Diagnose complex faults, perform root-cause analysis and implement permanent corrective actions.
• Monitor vault health, performance metrics and security alerts; initiate proactive remediation.

• Execute patching, upgrades and version migrations across non-production and production environments.
• Configure safes, platforms, policies and network integration components according to least-privilege principles.
• Manage onboarding, rotation and de-provisioning workflows for privileged accounts.

• Enforce organisational security policies and applicable regulatory requirements (ISO 27001, PCI-DSS, SOX, GDPR).
• Conduct periodic access reviews, audit trails and compliance reporting; liaise with internal and external auditors.
• Ensure session isolation, credential vaulting and threat analytics are functioning as designed.

• Develop and maintain automation scripts (PowerShell, Python, REST API, PACLI) to reduce manual effort and human error.
• Integrate CyberArk with enterprise tools: SIEM, ITSM, IAM and DevOps pipelines.
• Participate in design reviews to embed PAM controls into cloud and on-prem architectures.

• Mentor L1/L2 support engineers; author standard operating procedures and knowledge-base articles.
• Coordinate with Security Engineering, Cloud Operations and Application teams to implement new use cases.
• Provide clear technical documentation and status reports to management and stakeholders.
  

• Bachelor’s degree in Computer Science, Information Security or related discipline.
• 4–6 years of hands-on experience administering CyberArk Privileged Access Management solutions.
• Deep understanding of Vault architecture, PVWA, CPM, PSM/PSMP, PTA, AAM and Conjur.
• Proficiency in scripting languages (PowerShell, Python, Bash) and REST/PACLI automation.
• Solid knowledge of Windows Server, Linux, Active Directory, LDAP, DNS, SQL and networking concepts.
• Demonstrated ability to analyse logs, perform RCA and resolve high-severity incidents under pressure.
• Familiarity with compliance frameworks and privileged-access security best practices.
  

• CyberArk Defender, Sentry or Guardian certification.
• Experience integrating PAM with public-cloud platforms (AWS, Azure, GCP) and native secret-management services.
• Exposure to DevOps tool-chains and infrastructure-as-code (Terraform, Ansible, Azure DevOps, GitHub).
• Background in highly regulated industries (financial services, healthcare, telecom, government).
  

• Strong analytical and structured problem-solving skills.
• Excellent verbal and written communication abilities.
• Ability to work both independently and collaboratively in a fast-paced, multi-time-zone environment.
• Commitment to knowledge transfer and continuous process improvement.
  

• Competitive compensation aligned with industry benchmarks.
• Performance-linked bonus and patent incentive schemes.
• Comprehensive health cover and retirement benefits.
• Defined career path within the IAM guild and wider Wise Analytics ecosystem.
• Opportunity to work on enterprise-scale projects that leverage cutting-edge analytics and AI technologies.