Senior Manager-Arcon

Role Summary

We are looking for a Senior Manager – Privileged Access Management (PAM) with strong hands-on expertise in ARCON PAM and deep understanding of enterprise IAM/PAM technologies. The role will be responsible for PAM & IAM architecture, engineering, implementation, operations, security governance, and transformation, supporting large-scale and highly available environments.

Key Responsibilities

ARCON PAM – Deep Technical Expertise

• Own architecture, engineering and administration of ARCON PAM across Production, DR and NDR environments.

• Strong hands-on knowledge of:

• ARCON PAM Server / Vault

• Gateway and Access Control components

• Password Vaulting & Password Rotation

• Privileged Session Management (PSM)

• Session Recording & Monitoring

• Privileged Account Discovery & Onboarding

• Application/Service Account Management

• SSH Key and credential management

• MFA and SSO integration

• Break-glass / emergency privileged access

• Design and troubleshoot PAM connectivity for Windows, Linux/Unix, databases, network devices, security devices and applications.

• Manage complex PAM deployments including HA, clustering, load balancing, DC/DR, failover and disaster recovery.

• Perform deep troubleshooting covering application, gateway, network, database, authentication and target-system layers.

• Lead ARCON upgrades, migrations, patching, capacity planning and performance optimization.

PAM Architecture & Engineering

• Design enterprise PAM architecture for on-premise, private cloud, public cloud and hybrid environments.
• Define secure architecture for privileged access across servers, databases, network devices, cloud workloads and applications.
• Design PAM integration with Active Directory/LDAP, IAM/IGA, SIEM, ITSM, MFA and SSO platforms.
• Drive onboarding automation and bulk onboarding for large server/application estates.
• Implement controls for human and non-human privileged identities, including service accounts, application IDs and machine identities.
• Evaluate emerging controls such as JIT/JEA access, passwordless privileged access, secrets management and zero-standing privilege.

IAM / Security Technology Depth

Candidate should have good technical understanding of:

• Active Directory, LDAP, Kerberos and authentication protocols
• SAML 2.0, OAuth 2.0, OpenID Connect and MFA
• IAM/IGA platforms such as IAM/OIG, SailPoint, Saviynt or equivalent
• Windows and Linux privileged account management
• Database privileged accounts – Oracle, MySQL, PostgreSQL, MS SQL etc.
• Cloud IAM concepts across AWS/Azure/OCI/GCP
• APIs, REST integrations and automation/scripting
• Networking concepts including DNS, TCP/IP, firewall, proxy, VIP/load balancer and TLS/SSL
• Encryption, key management, HSM and FIPS concepts
• SIEM/SOC integration and privileged activity monitoring

Governance, Risk & Compliance

• Establish PAM policies for privileged account lifecycle, password rotation, session monitoring and access reviews.
• Ensure least privilege, segregation of duties and controlled emergency access.
• Support security audits, risk assessments and compliance evidence.
• Working understanding of security frameworks/regulations such as ISO 27001, PCI DSS, RBI requirements, NIST and applicable regulatory controls.
• Own remediation of PAM-related audit observations, vulnerabilities and security risks.

Leadership & Service Ownership

• Lead PAM engineering and operations teams.
• Own technical escalations and major incident resolution.
• Drive OEM/vendor engagements and challenge proposed solutions based on technical and architectural requirements.
• Define SLA/KPI, availability, capacity, resiliency and operational health metrics.
• Conduct architecture/design reviews, RCA reviews and security assessments.
• Mentor engineers and develop strong internal PAM technical capability.
• Work closely with IAM, Security, Infrastructure, Cloud, Network, Database and Application teams.

Required Experience

• 4+ years of overall IT/Cybersecurity experience and Strong ARCON PAM implementation/engineering experience mandatory.
• Experience managing PAM in a large enterprise environment with thousands of servers/accounts.
• Strong troubleshooting and solution-design capability; the position requires technical depth and not only operational/project management experience.
• Experience leading PAM implementations, migrations, upgrades and DR/HA initiatives.

Preferred Skills

Primary: ARCON PAM, PAM Architecture, Privileged Account Management, PSM, Password Vaulting, Password Rotation, Session Management, HA/DR

Secondary: Active Directory, LDAP, IAM/IGA, SSO, MFA, Linux, Windows, Databases, REST APIs, SIEM, ITSM, Cloud IAM

Good to Have: CyberArk / BeyondTrust / Delinea / Sectona exposure, Secrets Management, HSM/KMS, JIT/JEA, DevOps/CI-CD secrets and Non-Human Identity management.