SME - OKTA, CyberArk PAM

Years of Experience

• 8+ years of experience in operations OR deployment & implementation of Privileged Access Management using CyberArk solution for large scale customers across various industry verticals.

General Description

• Serve as an SME responsible for the implementation, administration, support, and optimization of BeyondTrust PAM and HashiCorp Vault solutions across enterprise environments.
• Manage privileged access, endpoint privilege controls, and secrets management services, ensuring secure access to critical systems, applications, and infrastructure.
• Collaborate with infrastructure, security, IAM, cloud, and DevOps teams to support integrations, onboarding activities, automation initiatives, upgrades, and platform enhancements.

General Description

• Serve as an SME responsible for the implementation, administration, support, and optimization of BeyondTrust PAM and HashiCorp Vault solutions across enterprise environments.
• Manage privileged access, endpoint privilege controls, and secrets management services, ensuring secure access to critical systems, applications, and infrastructure.
• Collaborate with infrastructure, security, IAM, cloud, and DevOps teams to support integrations, onboarding activities, automation initiatives, upgrades, and platform enhancements.

• Hands-on experience with BeyondTrust PAM solutions and HashiCorp Vault, including implementation, administration, support, and operational management.
• Experience in implementing and supporting Privileged Access Management (PAM), Endpoint Privilege Management (EPM), and Secrets Management solutions using BeyondTrust and HashiCorp technologies.
• Strong knowledge of BeyondTrust Password Safe, Privileged Remote Access (PRA), Endpoint Privilege Management (EPM) and HashiCorp Vault architecture, secret engines, authentication methods, policies, and access control mechanisms.
• Experience in installing, configuring, upgrading, maintaining, and troubleshooting BeyondTrust and HashiCorp Vault environments in enterprise-scale deployments.
• Hands-on experience integrating BeyondTrust and HashiCorp Vault with Windows, UNIX/Linux servers, databases, network devices, cloud platforms, containers, Kubernetes, CI/CD pipelines, SSH keys, and enterprise applications.
• Experience in configuring and managing privileged access policies, password vaulting, session management, endpoint privilege controls, secrets management, and credential lifecycle processes.
• Hands-on experience onboarding privileged accounts, assets, applications, service accounts, and target systems into BeyondTrust and HashiCorp Vault platforms.
• Experience creating and managing Vault policies, authentication methods, secrets engines, roles, access controls, asset groups, and privileged access policies.
• Knowledge of SQL/PL-SQL, Active Directory, LDAP, Windows Server, UNIX/Linux administration, and enterprise authentication mechanisms.
• Strong experience in VMware virtualization environments, and infrastructure troubleshooting supporting PAM and secrets management deployments.
• Knowledge of high-availability configurations, disaster recovery, replication, backup/recovery processes, and platform resiliency concepts for BeyondTrust and HashiCorp Vault.
• Hands-on experience with HashiCorp Vault CLI, REST APIs, PowerShell, Python, and automation/integration scripting for administration, onboarding, and operational tasks.
• Experience integrating BeyondTrust and HashiCorp Vault with LDAP, Active Directory, MFA solutions, SIEM platforms, IAM solutions, cloud identity providers, and DevSecOps tool chains.
• Experience supporting Windows and Linux operating systems and troubleshooting PAM, privileged access, and secrets-management-related issues across hybrid infrastructure environments.
• Strong understanding of application secrets management, dynamic secrets, certificate management, token-based authentication, and secure machine-to-machine access using HashiCorp Vault.

Soft Skills

• Excellent communication and presentation skills.
• Strong problem-solving and critical thinking skills.
• Exceptional project management and organizational abilities.
• Team collaboration and leadership skills.
• Client-focused approach with a commitment to delivering exceptional customer service.

Certifications (Good to have)

Good to have relevant certificates like (any of the below):

• CyberArk Certified Defender
• CyberArk Certified Sentry
• BeyondTrust Certified Administrator (BCA)
• BeyondTrust Password Safe Certification
• BeyondTrust Endpoint Privilege Management (EPM) Certification
• BeyondTrust Privileged Remote Access (PRA) Certification

Educational Qualifications

• University degree in IT or/and IT Security.
• Bachelor’s degree in computer science/ IT or any relevant fields.