PUAM CyberArk Architect

PUAM CyberArk Architect

This role has been designed as ‘Hybrid’ with an expectation that you will work on average 2-3 days per week from an HPE office.

Job Description:

What you’ll do:

The Security Consultant should have a strong understanding of the emerging security practices and standards. Should be able to consult, engineer and apply security best practices while designing and proposing solutions to our enterprise customers.

The IAM CONSULTANT is responsible for being the working on the design, installation, integrations, and deployment of CyberArk PUAM products and modules (i.e.,  PVWA, PSM, PSMP, PVW), OKTA (SSO, UD, LM, API AM, Microservices etc.). The IAM consultant is responsible to collaborate with Customer/partners both internal and external on a CIAM solution; working with the teams on implementation and support of the Identity and Access management solution; supporting on implementation of the Identity Governance solution (IGA); creating Cloud based profiles for PING accounts, and supporting microservice account syncing; architecture & associate Artifacts, including best practice, playbook; contributing to support repeatable processes for Access Management using PING and Okta; and assisting application teams through the SDLC process (including requirements gathering, configuration, testing to integrate applications with IAM platform)

An Infrastructure Security Consultant undertakes complex work of a high-risk level, often working on several projects. In this role, you will:

• Interact with senior stakeholders across departments.
• Understanding, decision making, balancing requirements, and deciding between approaches.
• Produce patterns and support quality assurance.
• Be the point of escalation for architects.

What you need to bring:

Experience:

• Minimum 5 years of working experience in Cyber Security Consulting or Advisory.
• Successfully delivered at-least 2 (two) Cyber Security consulting and implementation projects.

Certification (Preferred):

• Valid OEM certification on IAM (e.g., CIAM, or related to relevant required skills.) - Specialty

Knowledge and Skills

Candidate should have experience in the below domains

• Identity & Access Management (IAM), Privilege Access Management (PIM/PAM), Database Activity Monitoring (DAM) (e.g., Beyond Trust, CyberArk, Sailpoint, Iraje, Imperva etc.)
• Certificate Lifecycle Management (CLM, CLMS), Public Key Infrastructure (PKI), Hardware Security Module (HSM). (e.g., Thales, Venafi)
• Certificate Lifecycle Management (CLM, CLMS), Public Key Infrastructure (PKI), Hardware Security Module (HSM). (e.g., Thales, Venafi)
• Well versed on email security solution (Proofpoint, Barracuda)
• Experienced in Nexus Digital Access
• Expertise in OKTA, Access Gateway, Single Sign-On, Adaptive MFA, Universal directory, Advanced Server Access, API Access Management, Secure authentication, access management systems, Identity as a Service (IDaaS), WS-Federation, OAuth, OpenID Connect
• 5+ years’ experience in software development, implementing, integrating, and supporting Okta's cloud technologies
• Experience with OKTA planning, implementation, and operations
• Experience in integrating Okta with on-premises directory and Cloud
• Configure Okta to provide enterprise Single Sign-On services and enable Multi-Factor Authentication (MFA) platform features for internal and external applications
• Comprehension of authentication model based on AML/KERBEROS/AUTH/ MSAD and IAM
• Privileged User Access Management (PUAM) system using CyberArk.
• Understanding of cloud computing architecture, technical design, and implementations, including Infrastructure as a Service (IaaS), Platform as a Service (PaaS) and Software as a Service (SaaS) delivery models
• Experience in various authentication standards such as SAML, OAuth and OpenID Connect
• Experience with SCIM and knowledge of various API authentication standards
• Proficient in access control mechanism Role Based Access Control (RBAC), Attribute Based Access Control (ABAC).
• Knowledge of web services (REST/SOAP)
• Experience with various LDAP products including AD

Accountability, Accountability, Action Planning, Active Learning (Inactive), Active Listening, Bias, Business Growth, Business Planning, Cloud Computing, Cloud Migrations, Coaching, Commercial Acumen, Creativity, Critical Thinking, Cross-Functional Teamwork, Customer Experience Strategy, Data Analysis Management, Data Collection Management (Inactive), Data Controls, Design Thinking, Empathy, Follow-Through, Growth Mindset, Hybrid Clouds, Infrastructure as a Service (IaaS) {+ 10 more}

Health & Wellbeing

We strive to provide our team members and their loved ones with a comprehensive suite of benefits that supports their physical, financial and emotional wellbeing.

Personal & Professional Development

We also invest in your career because the better you are, the better we all are. We have specific programs catered to helping you reach any career goals you have — whether you want to become a knowledge expert in your field or apply your skills to another division.

Diversity, Inclusion & Belonging

We are unconditionally inclusive in the way we work and celebrate individual uniqueness. We know diverse backgrounds are valued and succeed here. We have the flexibility to manage our work and personal needs. We make bold moves, together, and are a force for good.

#india#operations

Job:

Services

Job Level:

TCP_04

Hewlett Packard Enterprise is EEO F/M/Protected Veteran/ Individual with Disabilities.

HPE will comply with all applicable laws related to employer use of arrest and conviction records, including laws requiring employers to consider for employment qualified applicants with criminal histories.