CyberArk Engineer - PAM

Overview

Engineer role focused on CyberArk privileged access management (PAM), providing L2/L3 support, administration and security assurance for enterprise PAM solutions.

What you'll do

• Provide L2/L3 support for CyberArk incidents, service requests, problems, and changes; troubleshoot Vault, PVWA, CPM, PSM, PSMP, EPM, connector, credential rotation, reconciliation, and session-launch issues.
• Monitor CyberArk component availability, logs, alerts, audit trails, service health, capacity, and integration dependencies; identify root causes and implement corrective and preventive actions.
• Investigate privileged-access security events and support incident response, evidence collection, access containment, and remediation activities.
• Conduct periodic reviews of privileged accounts, Safes, memberships, entitlements, policies, inactive accounts, exceptions, and session activity.
• Maintain operational documentation, architecture diagrams, build guides, standard operating procedures, recovery procedures, knowledge articles, and support playbooks.
• Produce audit and compliance evidence aligned with organizational policies and applicable control frameworks such as NIST, ISO 27001, PCI DSS, and SOX.

What you'll need

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Engineering, or a related field, or equivalent relevant experience.
• At least 7 years of experience in cybersecurity, IAM, or infrastructure security, including substantial hands-on experience supporting enterprise PAM solutions.
• Demonstrated hands-on experience with CyberArk PAM implementation, administration, integration, troubleshooting, and production support.
• Experience working in enterprise environments with formal incident, request, problem, change, release, and access-governance processes.
• Hands-on expertise with CyberArk EPV, Digital Vault, PVWA, CPM, PSM, PSMP, and EPM.
• CyberArk privileged account onboarding, Safe and platform configuration, access controls, password rotation, reconciliation, verification, account dependencies, and service-account management.
• CyberArk PSM connection components, session isolation, recording, monitoring, command control, connector troubleshooting, and privileged-session issue resolution.
• CyberArk EPM policy creation and tuning, endpoint least privilege, removal of local administrator rights, application control, privilege elevation, agent administration, and event analysis.
• Strong knowledge of Active Directory, LDAP, Windows Server, Unix/Linux, networking fundamentals, databases, service accounts, and authentication protocols.
• Knowledge of IAM/PAM concepts, including privileged identity lifecycle, RBAC, least privilege, separation of duties, access certification, MFA, SSO, and Zero Trust principles.
• Experience integrating CyberArk with SAML/MFA, SIEM, ITSM, directory services, monitoring tools, and enterprise applications.
• Scripting and automation experience using PowerShell, Python, Bash, and/or REST APIs.
• Strong troubleshooting, root-cause analysis, documentation, stakeholder communication, and production-support skills.

Details

• Location: Hyderabad, India.