Role & responsibilities

Architecture & Infra Knowledge :- Look for specific environment sizing (e.g., "Managed 10,000+ endpoints and 5+ PVWA instances"). Lab-only profiles usually mention just 1 or 2 accounts. The profile should explicitly mention setting up or managing Distributed Vaults, Cluster Vaults (using Quorum disks), and Disaster Recovery (DR) drills.Check for an understanding of the CyberArk Vaults internal security (e.g., Code-Data Isolation, firewall rules, and specific port configurations like 1858 for Vault communication)

Advanced Component Engineering:-
CPM & PSM Customization: Look for experience creating custom connection components or modifying Process and Prompts files for non-standard target systems.Session Management: Experience with both PSM for Windows and PSM for SSH (PSMP), including session recording storage mechanics.Secrets Management (AAM/AIM): For senior profiles, look for Application Access Manager (AAM) or Conjur experience, proving they can handle machine-to-machine secrets integration for DevOps pipelines.EPM & PTA: Mention of Endpoint Privilege Manager (EPM) and Privileged Threat Analytics (PTA) indicates a comprehensive understanding of the complete CyberArk product suite.

Deep Troubleshooting & Maintenance Capability:-
Cred-File Recreation: A classic interview checkpoint.



The profile or candidate must demonstrate how to resolve out-of-sync component users (like PVWAApp or CPM users) by recreating credentials files using the CreateCredFile utility.Reconciliation & Rotation Failures: Experience diagnosing CPM errors, managing Reconcile/Logon accounts, and fixing permission blocks on the target machine.Upgrades & Patching: Active participation in CyberArk version upgrades

Directory Integration & Ecosystem Automation:-
Directory Services: Robust experience with Active Directory (AD), LDAP/S integration, and configuring directory mapping for user provisioning.Authentication Policies: Implementing Multi-Factor Authentication (MFA), SAML integration, and Single Sign-On (SSO) for the PVWA portal.Automation & Scripting: Using REST APIs or CyberArk’s PACLI (Privileged Account CLI) alongside PowerShell or Python to automate bulk account onboarding and continuous monitoring

apart from the technical requirements, soft skills, communication, executive presence is key

Upgrades, custom CPM/PSM plug-in development, Cluster Vaulting, AAM/Conjur pipeline integrations

The privilege access management (PAM) consultant will be responsible for working with the PAM Manager/Assistant Manager to maintain Deloitte UK’s PAM solutions in accordance with the firm’s IAM policies and standards

📌 PAM (Hyderabad)
🏢 Cloudxtreme
📍 Hyderabad