We are looking for an experienced CyberArk L3 Support Engineer for one of our esteemed clients with strong expertise in Privileged Access Management (PAM) and CyberArk solutions. The role involves providing L3 support, troubleshooting complex CyberArk issues, performing root cause analysis, implementing and maintaining CyberArk PAS solutions, and supporting enterprise-scale PAM initiatives. The ideal candidate will have deep technical knowledge of CyberArk components, integrations, automation, and security best practices.

- Role: L3 Support Engineer
- Experience: 8 to 15 years
- Job Type: Full-Time Employment

- Provide L3 support and resolve complex CyberArk-related issues across enterprise environments.
- Perform Root Cause Analysis (RCA) for recurring incidents and implement permanent fixes.
- Troubleshoot PVWA, CPM, PSM, Vault, PTA, AIM, and Credential Provider components.
- Resolve session connectivity issues, password rotation failures, and vault communication problems.
- Implement, configure, and manage CyberArk Privileged Access Security (PAS) solutions.
- Manage CyberArk infrastructure, including PVWA, PSM, CPM, Vault, and Credential Providers.
- Onboard privileged accounts, safes, platforms, applications, and security policies.
- Integrate CyberArk with enterprise systems, including Active Directory, LDAP, SIEM, IAM, SSO, and cloud platforms.
- Perform CyberArk upgrades, patching, hardening, backup, restore, and performance tuning activities.
- Conduct periodic access reviews, audit support, compliance reporting, and security assessments.
- Automate CyberArk administration and operational tasks using REST APIs, PowerShell, Python, and custom scripts.




- Support incident response activities related to privileged account security and access management.
- Collaborate with architecture, security, and infrastructure teams to enhance PAM maturity and security posture.
- Develop and maintain technical documentation, procedures, and operational runbooks.

Expertise You'll Bring:

- 8? 12 years of overall IT experience with a minimum of 5 years of hands-on CyberArk and PAM engineering experience.
- Strong expertise in CyberArk PAS, PVWA, CPM, PSM, Vault, PTA, AIM, and credential providers.
- Extensive experience in privileged account onboarding, platform customization, and policy management.
- Strong troubleshooting and support experience across CyberArk environments.
- Proficiency in PowerShell, Python, REST APIs, and automation scripting.
- Strong understanding of Windows, Linux, Active Directory, LDAP, network security, authentication, and access management technologies.
- Experience integrating CyberArk with SIEM, IAM, SSO solutions, cloud platforms, and enterprise applications.
- Knowledge of PAM security best practices, system hardening, compliance requirements, and audit frameworks.
- Hands-on experience in CyberArk version upgrades, migrations, backup and recovery, performance tuning, and troubleshooting.
- Experience supporting large-scale enterprise CyberArk deployments and operations.
- Knowledge of cloud PAM integrations with AWS, Azure, and GCP.
- Exposure to DevOps environments, secrets management, credential rotation, and CI/CD pipeline integrations.
- CyberArk certifications such as Defender, Sentry, or Guardian preferred.
- Robust documentation, communication, stakeholder management, and problem-solving skills.
- Ability to work effectively in global support environments covering US and EU business hours.

📌 CyberArkSupport Engineer (Pune)
🏢 iFocal Solutions
📍 Pune