- Advanced hands-on experience administering Idira / CyberArk Privilege Cloud, including safes, accounts, platforms, permissions, users, groups, policies, password management settings, session access configuration, and operational troubleshooting.

- The Engineer must be able to support production Privilege Cloud environments confidently and resolve standard technical issues without constant escalation.

Preferred Candidate Profile :

The Engineer must understand how CPM manages password verification, change, reconciliation, failure handling, and policy enforcement.

1. PSM and PSMP Session Access Support :

- Hands-on experience supporting privileged session access through PSM and PSMP.

- Working knowledge of the Privilege Cloud connector layer used to connect client environments to the Idira / CyberArk cloud service. CyberArk documentation describes Privilege Cloud connectors as required to connect customer networks to the Privilege Cloud service, with connector-related CPM and PSM components documented as part of the deployment and maintenance model.

2. CyberArk REST API and Automation

3. Unix / Linux Privileged Access :

- Working knowledge of Unix/Linux privileged access patterns.

- The Engineer should understand how external administrators, vendors, contractors, and support partners may require controlled access into client environments without broad VPN access or unmanaged credentials.

Required Certifications :

- CyberArk / Idira Defender PAM

- CyberArk / Idira Sentry CyberArk Privilege Cloud

- CyberArk / Idira Certified Delivery Engineer, CDE, for Privilege Cloud

- CompTIA Security+ or equivalent security certification