CyberArk / PAM Engineer

𝗧𝗵𝗶𝘀 𝗿𝗼𝗹𝗲 𝗶𝘀 𝗳𝗼𝗿 𝗼𝗻𝗲 𝗼𝗳 𝘁𝗵𝗲 𝗪𝗲𝗲𝗸𝗱𝗮𝘆'𝘀 𝗰𝗹𝗶𝗲𝗻𝘁𝘀

𝗦𝗮𝗹𝗮𝗿𝘆 𝗿𝗮𝗻𝗴𝗲: 𝗥𝘀 𝟭𝟬𝟬𝟬𝟬𝟬 - 𝗥𝘀 𝟮𝟬𝟬𝟬𝟬𝟬𝟬 (𝗶𝗲 𝗜𝗡𝗥 𝟭-𝟮𝟬 𝗟𝗣𝗔)

Experience: 7+ yrs

Location: Remote (India), Pune

Job Type: Full-time

We are looking for an experienced CyberArk / Privileged Access Management (PAM) Engineer to administer, maintain, and optimise enterprise privileged access management systems. The role focuses on ensuring the security, availability, and reliability of CyberArk environments through system administration, configuration management, troubleshooting, monitoring, and access control operations.

The ideal candidate will have strong hands-on expertise in CyberArk components, privileged account management, security event monitoring, and operational support. This position offers the opportunity to work on a managed services engagement supporting enterprise security operations while maintaining high standards of service delivery, compliance, and operational excellence.

Key Responsibilities

• Administer CyberArk configuration changes, application updates, and routine platform maintenance activities.
• Monitor the health, availability, and performance of the CyberArk PAM environment.
• Troubleshoot CyberArk-related incidents, identify root causes, and coordinate escalations where necessary.
• Monitor and respond to CyberArk logs, alerts, and security events to maintain the integrity of privileged access controls.
• Manage privileged account onboarding, password management policies, and access configurations.
• Work with CyberArk components, including Digital Vault, PVWA, CPM, PSM, and PSMP.
• Support integration between CyberArk and Active Directory for privileged identity and access management.
• Coordinate patch management, platform upgrades, certificate renewals, and other maintenance activities.
• Collaborate with IAM Operations to manage privileged account provisioning and resolve access-related issues.
• Respond to queries from IAM team members and end users regarding privileged access and platform functionality.
• Analyse logs and investigate alerts to identify potential security issues or operational failures.
• Validate service requests against approved runbooks and standard operating procedures before execution.
• Record completed activities, configuration changes, and incident resolutions in ServiceNow.
• Develop and maintain technical documentation, system configuration records, troubleshooting guides, and operational runbooks.
• Ensure all activities comply with established SLAs, security policies, audit requirements, and client operational standards.
• Identify opportunities to improve platform stability, operational efficiency, and privileged access security.

What Makes You a Great Fit

• 7+ years of hands-on experience administering and supporting CyberArk Privileged Access Management solutions.
• In-depth knowledge of CyberArk components, including Vault, PVWA, CPM, PSM, and PSMP.
• Strong experience with privileged account onboarding, password management, access controls, and policy configuration.
• Practical experience troubleshooting CyberArk incidents and resolving platform-related issues.
• Good understanding of Active Directory integration and enterprise identity management.
• Experience analysing logs, investigating security alerts, and supporting incident response in PAM environments.
• Familiarity with patch management, certificate renewals, platform upgrades, and routine maintenance.
• Experience using IT service management tools such as ServiceNow and following documented operational procedures.
• Strong documentation, analytical, troubleshooting, and problem-solving skills.
• Ability to work effectively with IAM Operations, security teams, and end users in a managed services environment.
• Strong understanding of security best practices, compliance requirements, and privileged access governance.
• CyberArk Trustee, Defender, or Sentry certifications are preferred; Guardian or Luminary-level certifications are an advantage.
• Experience integrating CyberArk with SIEM platforms and exposure to cloud PAM environments such as AWS or Azure are desirable.
• CompTIA Security+ or CISSP certification would be an added advantage.