Technical Analyst - CyberArk

What’s The Role: Technical Analyst - CyberArk

Access Management (AM) is a critical component of Shell's Enterprise Technology (ET), with the team diligently managing access provisioning for Shell’s business-critical applications. This ensures compliance with both internal and external control requirements. The scope of activities includes Access Request Management, Control Operations, Profile Maintenance and Development, and Access Security Design and Architecture.

As a Technical Analyst - CyberArk, you will be primarily responsible for providing second-level technical support for Privileged Access Management (PAM) and Identity & Access Management (IAM) tools, specifically focusing on CyberArk. This role involves designing and implementing robust privileged access management solutions, driving change management activities, proactively addressing security vulnerabilities, and ensuring strict adherence to organizational standards.

What You’ll Be Doing

• Design, implement, and maintain Privileged Access Management (PAM) solutions, particularly CyberArk, to ensure secure and compliant management of privileged accounts across the entire enterprise.
• Administer various CyberArk components, including PSM, SCA, CPM, CCP, DPA, Secrets Hub, and SIA.
• Onboard privileged accounts across diverse platforms such as Active Directory, Unix, Windows, and Databases, which includes safe creation, platform setup, and master policy configuration.
• Integrate PAM with existing enterprise systems, leading cloud platforms like AWS and Azure, and CI/CD pipelines.
• Develop custom scripts for comprehensive privileged access reporting and generate essential compliance reports.
• Provide crucial support for audit and compliance activities through detailed reporting and thorough analysis.
• Efficiently resolve PAM-related incidents and problems, coordinating closely with vendors or internal support teams to ensure timely resolution in line with established Service Level Agreements (SLAs).
• Ensure that all IAM platform changes and upgrades strictly comply with change management protocols, preventing any adverse impact on deployed services.
• Execute system and software upgrades on IAM platforms with precision and care.
• Manage and enforce stringent access controls to comply with Information Risk Management (IRM) guidelines, clearly defining accountability for IT staff.
• Maintain effective communication and foster strong relationships with internal stakeholders and external service providers.
• Monitor and manage supplier performance rigorously to guarantee consistent service quality.
• Drive process transformation and continuous improvement initiatives to simplify and standardize role management design and practices.

What You Bring

• Bachelor’s degree in Information Technology or a related field, coupled with a minimum of 5 years of overall work experience.
• IAM Expertise: Strong foundational knowledge of Identity and Access Management (IAM), User Access Management, provisioning processes, Segregation of Duties (SoD) principles, access controls, and relevant certifications (e.g., CyberArk, Saviynt, SailPoint, IDM tools).
• Privileged Access Management: Extensive hands-on experience with CyberArk and comprehensive privileged account lifecycle management.
• Technical Proficiency: Deep understanding of core IAM principles and the entire CyberArk product suite, including active adoption of new features.
• Cloud & DevOps: Familiarity with leading cloud platforms like AWS and Azure, alongside experience with containerization technologies.
• Process & Automation: Proven experience in technical documentation, streamlining onboarding workflows, and building robust automation pipelines.
• Ability to thrive within teams from diverse cultures and across different time zones in a global, virtual environment.
• Effective communication and influencing skills, with the ability to articulate clearly in spoken and written English.
• Good customer liaison skills, capable of interacting effectively across all organizational levels.

Key skills/competency

• CyberArk PAM
• Identity and Access Management (IAM)
• Privileged Access Management (PAM)
• Cloud Security (AWS, Azure)
• Security Compliance
• Incident Management
• Automation Scripting
• Change Management
• Active Directory
• Unix/Windows Security