CyberArk Security Consultant

Skills

Application Scoping Any application seeking to on-board to CyberArk must go through scoping and it is the duty of the CyberArk operations analyst to complete this process. The process involves guiding the user through completing a questionnaire about their application performing an account analysis evaluating the questionnaire and account analysis and then determining the use case the application will fall under for integration with CyberArk (for standard use cases only). Processing CyberArk Tasks CyberArk operations team members are expected to process CyberArk related tasks according to standard operating procedures. These tasks include but may not be limited to the following: Safe creation Safe access Vaulting of accounts Creating CyberArk objects for AIM integration Host whitelisting Application scoping and on-boarding CyberArk clean-up and remediation Privileged account lifecycle management Processing CyberArk Incidents CyberArk operations team members are expected to process CyberArk related incidents according to standard operating procedures. These incidents include troubleshooting but may not be limited to the following: CyberArk integration errors User access Customer Interaction CyberArk operations team members will be in contact with application teams on a regular basis. Team members are expected to communicate processes and answer questions clearly.

Description

The CyberArk Operations Information Security Ops Specialist’s primary function is to ensure applications and platforms within the TIAA environment adhere to security standards. In the event an application or platform does not meet these standards, the analyst’s role is to devise a remediation plan to achieve security compliance. This involves working with application/platform owners to apply security controls within the respective application. Other duties include, but are not limited to, managing user access within CyberArk in queue format, educating end users regarding security protocols and properly securing their applications, analyzing trends to drive process reform, and write standard operating procedures for standard CyberArk integration use cases. Candidates must be comfortable interfacing with senior executives, providing exceptional customer experience, and delivering value to the business.

Responsibilities

• 1 or more years of work experience in an Identity and Access Management position
• 4 or more years of work experience in an Information Technology position
• Desired Skills:
• Four year degree preferred
• CyberArk Enterprise Password Vault, Application Identity Manager, and Conjur experience
• Experience with ServiceNow, Sailpoint, and AWS
• Scripting experience (Python, PowerShell, etc.)
• Experience with log based troubleshooting using Splunk or a similar tool
• Experience analyzing data and developing meaningful metrics
• Knowledge in designing access models to secure a platform or application
• Knowledge of implementing a privileged access model for a platform or application
• Strong documentation and problem solving skills
• Highly self-motivated, directed, and can work independently without supervision in a high-pressure environment
• Exceptional leadership skills and interpersonal skills, with a focus on rapport-building, listening, and questioning skills
• Experience working in and guiding a team-oriented and collaborative IT environment