duja singh

CyberArk Implementation Engineer

Pune, Maharashtra 7+ yrs exp 90 · Outstanding

About

CyberArk Implementation Engineer with 6+ years of overall IT experience, including 3.5 years dedicated to CyberArk PAM implementation and the remainder in CyberArk L2 operations. Hands-on expertise in end-to-end CyberArk Privileged Access Management (PAM) deployment — Vault, PVWA, CPM, PSM, and AIM/CCP installation, configuration, and hardening — along with CyberArk Endpoint Privilege Manager (EPM) policy administration, version upgrades, Disaster Recovery (DR) Vault setup, platform and master policy design, custom CPM plugins and PSM connection components, and bulk account onboarding via Password Upload Utility and REST API. Skilled in integrating CyberArk with Active Directory, LDAP, SIEM, and ServiceNow. CyberArk Defender (PAM-DEF) certified, with strong documentation (HLD/LLD), UAT, and operations handover experience across enterprise environments.

Skills & Expertise (22)

PVWA Advanced

8.3/10

Years Exp

Vault Advanced

8.3/10

Years Exp

CPM Advanced

8.0/10

Years Exp

PSM Advanced

8.0/10

Years Exp

SIEM Advanced

8.0/10

Years Exp

Security Compliance Advanced

7.5/10

Years Exp

Active Directory Advanced

7.5/10

Years Exp

LDAP Advanced

7.0/10

Years Exp

ServiceNow Intermediate

6.5/10

Years Exp

Windows Server administration Intermediate

6.5/10

Years Exp

Linux Administration Intermediate

6.0/10

Years Exp

Reconciliation Password Upload Utility Email notifications Ransomware Protection HLD LLD UAT SOPs Application Control audit support ITIL Processes

Work Experience

CyberArk Implementation Engineer

Accenture Pvt. Ltd.

Jan 2023 - Present

Lead end-to-end CyberArk PAM implementations covering Vault, PVWA, CPM, PSM, and AIM/CCP installation, configuration, and hardening across enterprise environments. Plan and execute CyberArk version upgrades and patching across all components, including pre-upgrade health checks, rollback planning, and post-upgrade validation. Configure and validate Disaster Recovery (DR) Vault replication and participate in scheduled DR drills and failover testing. Design platform and master policy configurations, and develop custom CPM plugins and PSM connection components for non-standard target systems. Deploy and manage CyberArk Endpoint Privilege Manager (EPM) agents on Windows endpoints and administer EPM Sets and policy sets via the SaaS management console. Implement least-privilege on endpoints by removing local administrator rights and configuring application control policies to allow, block, or elevate applications based on trusted sources. Configure privilege elevation (just-in-time) policies for standard users, and enable credential theft and ransomware protection to reduce endpoint attack surface. Review EPM audit events and the application catalog, fine-tune policies to minimize false positives, and generate endpoint compliance reports for audit. Install EPM agents on new endpoints and verify agent registration, connectivity, and health status in the management console. Add computers and users to the appropriate EPM Sets and assign the relevant policy sets. Handle day-to-day end-user elevation requests from the EPM inbox — approve, deny, or add applications to allow/elevate policies. Maintain application allow/block lists, update the application catalog, and perform routine EPM agent version upgrades. Integrate CyberArk with Active Directory/LDAP for authentication and provisioning, SIEM for security monitoring, and ServiceNow for ticketing workflows. Execute bulk privileged account onboarding using Password Upload Utility and REST APIs, and design safe structures and RBAC permission models aligned to least-privilege principles. Onboard applications to Central Credential Provider (CCP) for application credential retrieval, eliminating hardcoded credentials. Prepare HLD/LLD documents, implementation runbooks, and UAT test plans, and conduct knowledge transfer and handover to operations teams.

CyberArk L2 Operations Engineer

Accenture Pvt. Ltd.

Sep 2019 - Dec 2022

Provided L2 support for CyberArk PAM operations, resolving incidents and service requests related to privileged access within defined SLAs. Managed privileged account onboarding, safe creation and access provisioning, and user entitlement requests in line with RBAC policies. Troubleshot CyberArk components including PVWA, CPM, and PSM, performing health checks and escalating platform-level issues where required. Supported password management, rotation, and reconciliation activities, ensuring credential compliance across managed accounts. Collaborated with security and incident response teams to investigate access-related incidents and perform root cause analysis. Generated operational and compliance reports, maintained runbooks and SOP documentation, and supported internal and external audits. Joined as an intern within the same tenure, supporting security operations, documentation, and process improvement initiatives before transitioning into the CyberArk L2 role.

Intern, IT Support (Finance Department)

Indian Oil Corporation Ltd. (IOCL)

Jan 2018 - Jan 2019

Provided IT support to the Finance department, resolving user issues related to desktops, ERP/financial application access, printers, and network connectivity. Managed user account creation, password resets, and access provisioning for finance applications in coordination with the central IT team. Supported month-end and year-end financial closing activities by ensuring system availability and resolving application access issues on priority. Maintained IT asset records, prepared support documentation, and assisted with data backup and report generation for financial reporting and operational controls.