CyberArk EPM Engineer

Role Overview: We are seeking a CyberArk EPM Engineer with 3 to 5 years of hands-on experience in configuring, administering, and maintaining CyberArk Endpoint Privilege Manager (EPM) across enterprise infrastructure. The role focuses on eliminating standing administrative access, establishing least-privilege governance, and implementing just-in-time (JIT) privilege elevation policies across Windows and Linux environments.

Key Responsibilities:

• Configure, test, and maintain CyberArk EPM policies, elevation rules, application control settings, and endpoint security controls.

• Deploy, upgrade, and troubleshoot CyberArk EPM agents across Windows and Linux server/desktop endpoints at scale.

• Eliminate standing local administrator privileges and operationalize Just-In-Time (JIT) elevation workflows to enforce least-privilege posture.

• Triage, analyze, and resolve EPM agent malfunctions, application compatibility issues, and policy-blocking events.

• Monitor EPM administrative consoles, audit logs, and exception dashboards; tune policies to balance security enforcement with minimal operational disruption.

• Coordinate with infrastructure, systems engineering, endpoint management, and incident response teams for change execution and audit compliance.

• Support baseline integration points between CyberArk EPM and enterprise Privileged Access Management (PAM) architectures.

Required Technical Skills & Qualifications:

• 3 to 5 years of technical experience in Endpoint Security, Privileged Access Management (PAM), or IAM Operations.

• Direct hands-on administration, rule authoring, and policy maintenance in CyberArk EPM.

• Proven track record of agent deployment, rollouts, health monitoring, and troubleshooting on Windows and Linux endpoints.

• Strong understanding of access control principles, privilege elevation mechanics, and application whitelisting/blacklisting.

• Clear understanding of core CyberArk PAM components and privileged access lifecycles.

• Excellent technical documentation, analytical troubleshooting, and communication skills.

Preferred Qualifications:

• CyberArk Certified Delivery Engineer - EPM (CDE-EPM) or CyberArk Defender certification.

• Working knowledge of enterprise deployment mechanisms (Group Policy / GPO, SCCM/MECM, or Intune).

• Prior experience working within enterprise change-management and ticketing workflows (ServiceNow/Remedy).

1. Do you have hands-on experience configuring and administering policies in CyberArk EPM (Endpoint Privilege Manager) (Required: Yes)

2. Have you executed EPM agent installations, mass deployments, and issue resolution across Windows and Linux servers (Required: Yes)

3. What is your exact notice period, and can you commit to joining within 15 days (Required: Immediate to 15 Days)

4. Are you comfortable working a hybrid schedule supporting the 11:00 AM - 8:00 PM IST shift (Required: Yes)

5. Are you open to a Contract-to-Hire (CTH) engagement under Deloitte USI (Required: Yes)