Job Description

Job Description:

Key Responsibilities

Architecture & Optimization

• Design highly available CyberArk vault clusters, SailPoint connector architecture, and Thales Root/Sub-CA hierarchy with M-of-N ceremonies.

• Define privileged-account onboarding standards, IGA birth-right roles and PKI certificate profiles aligned to zero-trust principles.

Advanced Support & RCA

• Final escalation point for CPM failure, vault corruption, SailPoint provisioning errors, MPASS OTP outage, or HSM card set issues.

• Conduct packet/protocol traces (LDAP, RADIUS, OCSP) and HSM log analysis; produce formal RCA and mitigation plans.

Security Compliance & Audit

• Map vault session logs, SailPoint certification data and CA event logs to SAMA evidence matrices; present to internal & external auditors.

• Lead quarterly privileged-access reviews and annual PKI key-ceremony documentation.

Automation &