PAM and Secrets Management Engineer

Overview

Lead privileged access management (PAM) and secrets management initiatives across Applied Materials’ global enterprise infrastructure.

What you'll do

• Design, implement, and manage enterprise PAM solutions at scale using CyberArk.
• Architect and operate privileged session management for RDP and SSH, including credential injection.
• Build automated account discovery and onboarding workflows for Windows local, AD, and Linux/Unix accounts.
• Configure session recording, monitoring, and alerting to meet compliance and security needs.
• Architect and operate HashiCorp Vault Enterprise across multi-cloud environments.
• Integrate Vault with CI/CD pipelines for secure secret injection and delivery.

What you'll need

• 5+ years hands-on experience with enterprise PAM solutions at scale.
• Deep experience with privileged session management, including RDP/SSH recording, monitoring, and credential injection.
• Strong account lifecycle knowledge: discovery, onboarding, and rotation for Windows local, AD, and Linux/Unix accounts.
• Experience with PAM platforms such as CyberArk PAS/PVWA/CPM/PSM or equivalent.
• 3+ years hands-on experience running HashiCorp Vault in production environments.
• Deep knowledge of Vault secrets engines and authentication methods (e.g., KV v1/v2, Dynamic Secrets, PKI, Transit; Kubernetes, AppRole, OIDC/JWT, AWS IAM, Azure AD).
• Experience integrating Vault with CI/CD pipelines for dynamic secret injection.

Details

• Location: Bangalore, India.
• Travel: Yes, 10% of the time.
• Relocation eligible: Yes.
• Employment type: Full time (Assignee / Regular).