IT Engineer

About the Role

The IT Engineer - CyberArk Production Security role involves working closely with team members and business teams to develop features, ensure alignment with best practices, and monitor promoted deliverables across environments. This position also includes support activities for production and test environments, such as job monitoring and issue resolution.

Key Responsibilities

• Drive and monitor production health using tools like Dynatrace, ensuring proactive issue detection and resolution.
• Oversee and ensure adherence to best practices across Incident, Problem, and Change Management processes.
• Manage key operational events including Datacenter Migrations, Disaster Recovery (DR) drills, Production Migrations, and Environment upgrades.
• Drive and report on Vulnerability, Obsolescence, and patch management of environments within the ARVAL landscape.
• Develop and maintain production reporting, providing actionable insights and clear communication to stakeholders.
• Ensure SOD, EOD, EOM, EOY processes are managed as per standard operating procedures.
• Foster automation, innovation, and continuous improvement in production activities aligned with production group strategies.

Direct Responsibilities

• Design, Implement & Manage CyberArk PAS solution for Multiple Clients.
• Install, configure, Migrate, Manage and Troubleshoot CyberArk Vault, DR, BACKUP, PVWA, PSM & PSMP components of the CyberArk PAS suite (version 12.6 to 14).
• Upgrade vault from 12.6 to 14.
• Install, Configure, Manage and Troubleshoot CyberArk Credential Provider & Central Credential Provider.
• Integrate CyberArk with LDAP Directory, SMTP, SAML, SIEM & Monitoring Tools.
• Manage Windows & Linux server patches of the CyberArk PAS suite.
• Manage & update user Accounts, policies, safes of the CyberArk.
• Perform Bulk Accounts upload, reconciliation, verification & update using PowerShell script.
• Generate CyberArk Activity logs based on owner requests.
• Plan & Perform CyberArk Yearly DR Drill.
• Assist with CyberArk Risk Assessment and Internal/External Audit requirements.

Contributing Responsibilities

• Incident contribution: Assist the incident management team and act as the first point of contact for Arval network-related incidents.

Requirements & Tech Stack

• Operating Systems: Windows Server 2000 to 2022, RHEL, CentOS
• Identity and Access Management / Privileged Access Management (IAM/PAM): AD, Cyberark PAM/EPM, Okta SSO/MFA, DLP, PKI
• Intrusion Detection/Prevention Systems (IDS/IPS): Symantec Critical System Protection, Tripwire Enterprise
• Endpoint Security: Symantec, McAfee & Trend Micro Antivirus
• Mail Gateway: Proofpoint Protection Server, Trend Micro IMSS
• Mobile Security: Good MDM
• Web Proxy: Bluecoat Proxy, ISA Server 2004
• Security Information and Event Management (SIEM): ArcSight, Splunk
• Vulnerability Tools: Nexpose, Qualys, Nessus, Appscan, SonarQube
• Security Frameworks: ISO27001/2, NIST SP 800-53, CIS Controls
• Monitoring Tools: Dynatrace
• Deployment/Versioning Tools: Ansible, Refapp
• Project Tracking Software: Jira, Snow, Tufin

Qualifications

• Be autonomous on the asset (Senior to expert level) and motivated on daily tasks.
• Be an active member of the squad (often multi-technologies).
• Be proactive by raising alerts when flagged, understanding the global context, and suggesting solutions.
• Be able to provide proofs that developments match requirements (test cases).
• Have proper communication with the Business (English language).