All projects
2018 — 2022 · BFSI · Privileged Access Security
CyberArk Privileged Access Migration
Banking Middleware Security
End-to-end migration from legacy Service Account Utility to CyberArk PAS across banking middleware — demand deposits, credit cards, consumer loans.
Project visual
CyberArk Privileged Access Migration
The problem
Critical banking middleware was still relying on a legacy Service Account Utility for privileged credentials. Migrating to CyberArk Privileged Account Security needed to happen with zero disruption to live deposit, credit card, and consumer-loan operations.
Approach
- 01Led the end-to-end migration from SAU to CyberArk PAS across the affected banking middleware estate.
- 02Secured REST and SOAP web services with OAuth 2.0 and Basic Authentication, depending on caller capability.
- 03Migrated 5+ connection types — REST APIs, Kafka, JSR batches, database connectivity — onto the new privileged-credential model.
- 04Coordinated with security and infrastructure teams to validate migration outcomes across critical banking services.
Outcome
- Privileged credentials managed through CyberArk PAS across the middleware estate.
- Zero disruption to live financial operations during cutover.
- Standardised auth across REST, SOAP, Kafka, JSR, and database connection types.
Stack
- CyberArk PAS
- OAuth 2.0
- REST & SOAP
- Apache Kafka
- JSR Batches
- JDBC