US Telecom PAM Monitoring Case Study

Enhancing CyberArk Visibility with Splunk Integration

Organization Profile

A major U.S. telecommunications provider and the third largest wireless network operator in the country, with over 71,000 employees.

A leading U.S. telecom provider partnered with Presidium Solutions to enhance visibility and monitoring across its large-scale CyberArk PAM environment. With no centralized view of system health or privileged session activity, the organization required a scalable solution to enable real-time monitoring, alerting, and operational insight. Presidium delivered a Splunk-integrated solution to provide a unified view across all CyberArk components.

The Challenge

Large, complex CyberArk environment spanning 60+ production servers
Over 10,000 PAM users accessing critical telecom infrastructure
Distributed architecture across multiple data centers
Heavy reliance on PSM and PSMP farms for privileged session access
No centralized “single pane of glass” for system health or activity
Limited real-time monitoring and alerting capabilities
Slow response to service degradation or outages
CyberArk Vault classified as Tier 0, requiring maximum uptime and performance

The Solution

Presidium Solutions designed and implemented a Splunk-integrated monitoring and alerting framework tailored to the CyberArk environment:

Developed monitoring scripts to capture server and CyberArk service health across all components
Forwarded logs to Splunk in syslog format for centralized analysis
Built custom scripts to track active privileged sessions across PSM and PSMP servers
Created Splunk dashboards for:
- Overall system health and status
- Individual server and CyberArk service performance
- Vault performance metrics and trends
- Active privileged sessions and usage trends
Configured real-time alerting to notify operations teams when thresholds are met or exceeded

Results & Impact

24/7 monitoring and alerting across all CyberArk infrastructure and services
Centralized, real-time visibility into system health and privileged activity
Intuitive Splunk dashboards providing both high-level and detailed operational insights
Proactive alerting enables faster response to performance issues and outages
Improved operational confidence in maintaining Tier 0 system availability
Increased ROI by leveraging existing Splunk SIEM investment
Enhanced ability to demonstrate high availability, monitoring, and governance to internal stakeholders

Canadian Provisional Lottery Case Study

Expanded CyberArk PAM from minimal use to enterprise-wide coverage across gaming systems, infrastructure, endpoints, and vendors—improving security, audit readiness, and user adoption.

Major Healthcare Provider IAM Case Study

Presidium Solutions implements SailPoint Identity Security Cloud at a large University Medical and Research Hospital, automating access to cloud and on-premises applications for employees, providers and students.

Credit Union IAM Case Study

Presidium Solutions modernizes Identity and Access Management for a California-based credit union, automating lifecycle provisioning and de-provisioning across cloud and on-premises applications for 225,000+ members.

Canadian Utility PAM Case Study

Presidium Solutions implements Privileged Access Management for a major Canadian electric utility, securing critical infrastructure and enforcing least privilege across 4,000+ endpoints.

Let’s Strengthen Your Identity Security Program

Whether you are beginning your journey, looking to expand your program, or struggling with a current implementation, we provide the expertise to move your security objectives forward with confidence.

info@presidiumllc.com