Engineer, Privileged Access Management

Job Summary

Engineer, Privileged Access Management builds, configures, operates, and troubleshoots the PAM platform. Strategy and architecture are set by leadership and the PAM Architect/Global Lead; the Engineer executes within that design, onboarding privileged accounts and operationalizing least privilege. The Engineer works independently on assigned scope and coordinates with system owners across teams with their own environments.

This is an onsite role in Pune/Bangalore.

Responsibilities

• Engineer/operate PAM platforms: safes, policies, connectors, session recording, password rotation, discovery jobs, endpoint privilege policies, and integrations.
• Build automation (PowerShell/Python, REST APIs) for onboarding, rotation, and reconciliation.
• Contribute to reference-pattern implementation defined by the Architect; feed operational reality back into design.
• Support the sustainability model: runbooks, health checks, and managed-account ownership records.
• Onboard privileged/service accounts; manage safes, policies, and connectors.
• Triage failed rotations, vaulted-credential issues, and access-workflow failures.
• Remediate orphaned/shared/admin accounts; run and tune discovery jobs.
• Monitor privileged activity; support incident response and change control.
• Collect audit evidence; document configurations and runbooks.
• Coordinate with Windows/Linux, AD, and cloud owners on account integration.

The essential requirements of the job include:

• Bachelors degree in Cybersecurity, Computer Science, Information Technology, Engineering, or related field.
• 9+ years of cybersecurity or IT experience with hands-on privileged access management.
• Hands-on experience operating enterprise PAM platforms (such as CyberArk, BeyondTrust, or Delinea): onboarding, vaulting, password rotation, session recording, and discovery.
• Experience with Active Directory, Windows/Linux administration, and cloud IAM in support of privileged account management.
• Experience automating PAM tasks with scripting (such as PowerShell or Python) and REST APIs.
• It would be a plus if you also possess previous experience in:
• Experience with endpoint privilege management or cloud PAM.
• CyberArk Defender/Guardian, Security+, or a cloud security certification.
• Experience supporting global or multi-business-unit environments.

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.