Identity Engineer - Privilege Access

Overview

Administer and secure the enterprise privileged access management (PAM) and non-human identity (NHI) environment, with a primary focus on CyberArk Privileged Cloud. Partner with security, infrastructure, and application teams to govern privileged access, troubleshoot issues, and automate identity operations.

What you'll do

• Administer CyberArk Privileged Cloud, including users, groups, safes, vaults, PSM, and CPM.
• Manage the lifecycle of service accounts, API keys, secrets, certificates, and machine identities.
• Configure password, access, workflow, rotation, and least-privilege policies.
• Troubleshoot privileged access, authentication, network, connectivity, PSM, and CPM issues.
• Develop PowerShell and Python/REST API automation for onboarding, rotation, discovery, and reporting.
• Monitor logs and support SIEM integration, incident response, and anomalous activity detection.
• Build reports and Power BI dashboards for PAM and NHI health and compliance metrics.

What you'll need

• 10+ years of experience in cybersecurity, systems administration, or identity and access management.
• 5+ years of hands-on CyberArk Privileged Cloud experience.
• Experience managing non-human identities at scale.
• Knowledge of PAM architecture, including Vault, PSM, CPM, and Cloud Entitlements Manager.
• Proficiency with networking, firewalls, DNS, certificates, and cloud environments.
• Experience with Active Directory/LDAP, Entra ID, SAML, OAuth 2.0, MFA, and SSO.
• PowerShell and Python scripting experience with REST APIs and CyberArk SDKs.

Nice to have

• Bachelor's degree or equivalent experience.
• CyberArk Trustee or higher certification.
• Cloud or security certifications such as AWS, Azure, GCP, CISSP, CISM, or Security+.

Details

• Remote in India.
• Bonus eligible as part of the total compensation package.