CyberArk(TESCO)

Job title/role: IAM & PAM Cyberark

Experience – 11 to 14 years

Location – Hyderabad, Bangalore, Pune.

About Zensar:

Zensar is a digital solutions company helping organizations around the world achieve new thresholds of business performance. We work with clients in banking and financial services, hi-tech and manufacturing, insurance, consumer services, and more. We prepare our clients for sustainable success through experience design, cloud technology, advanced analytics, and business acceleration.

Zensar is seeking an experienced Data Loss Prevention (DLP) specialist to join our global cyber security operations and incident response team. The DLP focused Cybersecurity Operations and Incident Response Engineer is a critical member of the team providing subject matter expertise in the detection, alerting, and investigation of DLP incidents. Successful candidates will have a strong background in DLP analytics, investigation, and incident management.

We are seeking a skilled and experienced CyberArk Specialist to join our cybersecurity team. The ideal candidate will be responsible for implementing, managing, and optimizing our CyberArk Privileged Access Management (PAM) solution to secure privileged accounts and credentials across our organization's IT infrastructure.

Responsibilities

• CyberArk Implementation and Management
• Design, implement, and maintain the CyberArk PAM solution across the organization
• Configure and manage CyberArk components including Password Vault Web Access (PVWA), Central Policy Manager (CPM), and Privileged Session Manager (PSM)
• Implement and manage the CyberArk Agent and credentials management on target systems

• Set up and maintain integration with directory services (e.g., Active Directory) and other security tools

• Privileged Account Security

• Identify and onboard privileged accounts across various platforms (Windows, Unix/Linux, databases, network devices, cloud environments)
• Implement and manage password rotation policies and workflows
• Configure and maintain privileged session monitoring and recording

• Implement least privilege and just-in-time access principles using CyberArk

• Policy and Compliance Management

• Develop and maintain privileged access policies aligned with organizational security requirements and industry regulations
• Ensure compliance with relevant standards (e.g., PCI DSS, HIPAA, SOC 2) for privileged access management
• Conduct regular audits of privileged access and generate compliance reports

• Assist in responding to audit requests and compliance inquiries related to privileged access

• Security Monitoring and Incident Response

• Monitor CyberArk logs and alerts for potential security incidents
• Investigate and respond to privileged access-related security events
• Collaborate with the broader security team in incident response activities

• Conduct post-incident analysis and implement improvements to prevent future occurrences

• Application Password Management

• Implement and manage CyberArk Application Identity Manager (AIM) for secure application-to-application password management
• Work with development teams to integrate applications with CyberArk for credential retrieval

• Manage and rotate application passwords and API keys securely

• Performance Optimization and Troubleshooting

• Monitor and optimize CyberArk performance to ensure high availability and minimal latency
• Troubleshoot issues related to CyberArk components, integrations, and privileged access workflows
• Perform regular health checks and maintenance on the CyberArk environment

Requirements

• Bachelor's degree in Computer Science, Cybersecurity, or a related field
• 5+ years of experience in IT security, with at least 3 years focused on privileged access management
• Proven experience implementing and managing CyberArk PAM solutions
• Strong understanding of identity and access management concepts
• Experience with Windows and Unix/Linux systems administration
• Familiarity with cloud platforms (AWS, Azure, GCP) and DevOps practices
• Knowledge of relevant compliance standards (e.g., PCI DSS, HIPAA, SOC 2)
• Excellent problem-solving and analytical skills
• Strong communication skills, both written and verbal
• CyberArk Trustee certification required; CyberArk Guardian certification preferred
• Additional certifications (e.g., CISSP, CISM) are a plus

Relationships:

You will work with CIS Team (Shared Services, Network, Security, Applications) architects, engineers, developers, support, and leadership team on projects and provides subject matter expertise as necessary.

Maintaining a good relationship with our global IT teams is key to your success. In your role you will need to be able to communicate with people at all levels in the organization and work with several of our suppliers and partners.