Title : Sr Info Sec Ops Specialist
Location : Charlotte, NC / Frisco, TX
Hybrid
Job Summary
We are seeking an experienced Privileged Access Management Analyst to lead and support our organization's migration from on-premise CyberArk to CyberArk's SaaS Privilege Cloud solution. This role will be responsible for managing privileged access controls, implementing security best practices, and ensuring seamless transition to cloud-based identity access management.
Key Responsibilities
CyberArk Migration & Management
- Lead the migration effort from on-premise CyberArk PAM solution to CyberArk's SaaS Privilege Cloud platform
- Design and implement privileged access workflows and policies in the new SaaS Privilege Cloud/ CyberArk Identity environment
- Configure, manage, and troubleshoot CyberArk components including Password Vault Web Access (PVWA) and Central Policy Manager (CPM)
- Create and maintain documentation for CyberArk administration and end-user procedures
- Collaborate with technology teams to facilitate applications migrating/on-boarding to the Privilege Cloud solution.
Active Directory Management
- Provision, modify, and deprovision user accounts in Active Directory
- Implement and manage AD group policies and security settings
- Configure and maintain AD organizational units, groups, and delegation models
- Troubleshoot authentication issues and directory synchronization problems
Unix System Administration
- Provision and manage user accounts on Unix/Linux systems
- Implement security controls and access policies for Unix environments
- Integrate Unix systems with centralized identity management platforms
General Access Management
- Create and maintain access management policies and procedures
- Respond to access-related security incidents
- Collaborate with security, IT, and business teams on access requirements
Qualifications
Required Skills & Experience
- 3+ years of experience with privileged access management tools, preferably CyberArk
- Demonstrated experience with CyberArk migrations or significant version upgrades
- Experience with PAM Operational tasks, including safe creation and management, account onboarding, and policy generation.
- Strong working knowledge of Active Directory administration and group policy management
- Hands-on experience with Unix/Linux user provisioning and access control
- Understanding of identity and access management principles and best practices
- Experience implementing least privilege access models
Technical Knowledge
- CyberArk components: PVWA, CPM, Secrets Hub, Conjur, EPV, SIA, Privilege Cloud, Identity PSM, and PTA
- CyberArk task automation via PACLI & REST API
- Microsoft Active Directory, Group Policy, and PowerShell scripting
- Unix/Linux authentication systems and access controls
- LDAP, SAML, OAuth, and other authentication protocols
- Cloud security concepts and SaaS implementation best practices
Preferred Qualifications
- CyberArk Trustee certification, or CyberArk PAM Defender, Sentry, or Certified Delivery Engineer
- Microsoft certified (MCSA/MCSE)
- CISSP, CISM, or other security certifications
- Experience with identity governance and administration (IGA) platforms
- Scripting abilities in PowerShell, Python, or Bash
- Experience with DevOps and automation tools